RunAllProofsInfFlow

29

tests

4

failures

0

ignored

44m11.22s

duration

86%

successful

Failed tests

BlockContracts_nomacro

org.opentest4j.AssertionFailedError: group BlockContracts_nomacro:
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

LoopInvariants_nomacro

org.opentest4j.AssertionFailedError: group LoopInvariants_nomacro:
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

NewObjects_nomacro

org.opentest4j.AssertionFailedError: group NewObjects_nomacro:
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

SimpleEvoting_nomacro

org.opentest4j.AssertionFailedError: group SimpleEvoting_nomacro:
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

Tests

Test Method name Duration Result
SimpleEvoting data()[10] 2m41.35s passed
ToyVoting_nomacro data()[11] 33.366s passed
ConditionalConfidential_nomacro data()[12] 0.001s passed
SumExample_nomacro data()[13] 11.968s passed
ToyBanking_nomacro data()[14] 1m14.31s passed
BlockContracts_nomacro data()[15] 1m13.38s failed
MethodContracts_nomacro data()[16] 1m10.38s passed
LoopInvariants_nomacro data()[17] 1m9.48s failed
MiniExamples_nomacro data()[18] 1m42.93s passed
NewObjects_nomacro data()[19] 2m6.80s failed
ToyVoting data()[1] 25.491s passed
SimpleEvoting_nomacro data()[20] 2m10.16s failed
ToyVoting_fullmacro data()[21] 57.283s passed
SumExample_fullmacro data()[22] 10.805s passed
ToyBanking_fullmacro data()[23] 4m14.81s passed
BlockContracts_fullmacro data()[24] 1m22.14s passed
MethodContracts_fullmacro data()[25] 1m14.63s passed
InformationFlow_fullmacro data()[26] 5m22.36s passed
MiniExamples_fullmacro data()[27] 1m39.17s passed
NewObjects_fullmacro data()[28] 3m4.40s passed
SimpleEvoting_fullmacro data()[29] 2m58.19s passed
ConditionalConfidential data()[2] 13.929s passed
SumExample data()[3] 10.005s passed
ToyBanking data()[4] 1m51.71s passed
BlockContracts data()[5] 59.581s passed
MethodContracts data()[6] 1m9.79s passed
LoopInvariants data()[7] 1m8.46s passed
MiniExamples data()[8] 1m32.42s passed
NewObjects data()[9] 1m21.94s passed

Standard output

253        INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting 
367        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
373        WARN  main            d.u.i.k.s.ProofSettings   No proof-settings could be loaded, using defaults java.io.FileNotFoundException: /home/runner/.key/proof-settings.props (No such file or directory)
	at java.base/java.io.FileInputStream.open0(Native Method)

397        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).JML normal_behavior operation contract.0.key 
515        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).JML normal_behavior operation contract.0.key 
534        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.35ms 
747        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1617       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1617       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1621       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1621       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3022       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8258       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.51s 
8384       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].JML normal_behavior operation contract.0 
8445       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 394.7ns 
9482       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9606       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).JML normal_behavior operation contract.0.key 
9606       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).JML normal_behavior operation contract.0.key 
9607       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.6ns 
9610       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12505      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
12571      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].JML normal_behavior operation contract.0 
12574      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
12677      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12790      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).JML normal_behavior operation contract.0.key 
12790      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).JML normal_behavior operation contract.0.key 
12790      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.4ns 
12792      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15538      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
15618      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].JML normal_behavior operation contract.0 
15621      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
15724      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15831      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).JML normal_behavior operation contract.0.key 
15831      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).JML normal_behavior operation contract.0.key 
15832      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.7ns 
15833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18542      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
18592      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].JML normal_behavior operation contract.0 
18595      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
18697      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18820      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).JML normal_behavior operation contract.0.key 
18820      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).JML normal_behavior operation contract.0.key 
18820      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.8ns 
18821      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21417      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
21464      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].JML normal_behavior operation contract.0 
21466      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
21568      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21713      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).JML normal_behavior operation contract.0.key 
21716      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).JML normal_behavior operation contract.0.key 
21716      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 121.9ns 
21717      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24285      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
24327      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::secure_voting()].JML normal_behavior operation contract.0 
24331      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
25135      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25738      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting 
25742      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ConditionalConfidential 
320        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
338        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
361        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__hasAccessRight(CCExample.User)).JML normal_behavior operation contract.0.key 
483        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__hasAccessRight(CCExample.User)).JML normal_behavior operation contract.0.key 
503        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.98ms 
724        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1719       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1720       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1721       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1722       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3181       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5816       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8016       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.29s 
8136       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof ConditionalConfidentialExample[ConditionalConfidentialExample::hasAccessRight(ConditionalConfidentialExample.User)].JML normal_behavior operation contract.0 
8169       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 347.2ns 
10145      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10293      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__getConfidentialData(CCExample.User)).JML normal_behavior operation contract.0.key 
10294      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__getConfidentialData(CCExample.User)).JML normal_behavior operation contract.0.key 
10295      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.45ms 
10297      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
11199      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
13037      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
13108      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof ConditionalConfidentialExample[ConditionalConfidentialExample::getConfidentialData(ConditionalConfidentialExample.User)].JML normal_behavior operation contract.0 
13112      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
13617      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39669      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ConditionalConfidential 
39690      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample 
351        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
361        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
397        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).JML normal_behavior operation contract.0.key 
541        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).JML normal_behavior operation contract.0.key 
559        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.95ms 
790        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1665       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1666       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1667       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1667       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2898       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8211       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.42s 
8413       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].JML normal_behavior operation contract.0 
8448       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 312.5ns 
9724       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49687      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample 
49688      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking 
383        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
387        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
409        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
522        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
540        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.91ms 
754        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1713       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1714       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1716       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1716       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3226       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8586       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.83s 
8802       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].JML normal_behavior operation contract.0 
8838       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 402.2ns 
10113      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10285      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
10288      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
10289      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.01ms 
10294      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13390      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.1s 
13476      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::tryLogin(int,[C)].JML normal_behavior operation contract.0 
13485      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
34879      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35134      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
35135      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
35135      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.9ns 
35139      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38082      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.94s 
38171      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[java.lang.Object::<inv>()].JML accessible clause.0 
38175      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
43543      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
43714      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
43714      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
43714      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.4ns 
43715      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46517      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
46577      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].JML normal_behavior operation contract.0 
46581      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
46884      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47023      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
47024      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
47024      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 111.4ns 
47027      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49866      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
49919      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].JML normal_behavior operation contract.0 
49922      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
50027      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50156      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).JML normal_behavior operation contract.0.key 
50157      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).JML normal_behavior operation contract.0.key 
50157      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 99.6ns 
50158      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52915      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
52983      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].JML normal_behavior operation contract.0 
52987      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
53091      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53220      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
53221      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
53221      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.1ns 
53222      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56047      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.83s 
56117      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].JML normal_behavior operation contract.0 
56120      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 31.1ns 
62425      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
62626      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
62626      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
62626      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.7ns 
62627      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65403      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
65459      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].JML normal_behavior operation contract.0 
65462      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
65865      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66027      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
66027      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
66028      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 683.5ns 
66030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68716      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
68773      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::tryLogin(int,[C)].JML normal_behavior operation contract.0 
68776      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
88720      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
88939      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
88940      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
88940      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.8ns 
88941      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
91587      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
91639      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[java.lang.Object::<inv>()].JML accessible clause.0 
91642      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
96059      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
96249      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
96249      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
96249      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.6ns 
96251      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
98920      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
98979      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].JML normal_behavior operation contract.0 
98983      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
99285      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
99443      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
99444      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
99444      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71ns 
99445      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
102066     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
102110     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].JML normal_behavior operation contract.0 
102112     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
102216     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
102363     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).JML normal_behavior operation contract.0.key 
102364     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).JML normal_behavior operation contract.0.key 
102364     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58ns 
102364     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
104970     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
105014     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].JML normal_behavior operation contract.0 
105016     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
105119     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
105267     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.Bank(banking_example2.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
105267     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.Bank(banking_example2.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
105267     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
105268     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
107889     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
107934     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.Bank[banking_example2.Bank::login(int,[C)].JML normal_behavior operation contract.0 
107937     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
111352     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
161393     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking 
161394     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts 
331        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
339        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
369        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).JML operation contract.0.key 
472        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).JML operation contract.0.key 
500        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.09ms 
739        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1533       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1534       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1536       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1537       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3123       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8191       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.45s 
8320       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].JML operation contract.0 
8399       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 337.4ns 
9232       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9342       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).JML operation contract.0.key 
9342       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).JML operation contract.0.key 
9343       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 162.3ns 
9344       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12277      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
12364      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].JML operation contract.0 
12372      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
12575      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12695      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).JML operation contract.0.key 
12695      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).JML operation contract.0.key 
12696      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.48ms 
12698      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15468      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
15531      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].JML operation contract.0 
15535      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
15839      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15966      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).JML operation contract.0.key 
15967      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).JML operation contract.0.key 
15967      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73ns 
15968      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18585      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
18648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].JML operation contract.0 
18651      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
18954      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19117      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).JML operation contract.0.key 
19118      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).JML operation contract.0.key 
19118      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
19119      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21845      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
21895      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].JML operation contract.0 
21899      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
22203      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22386      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).JML operation contract.0.key 
22387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).JML operation contract.0.key 
22387      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.7ns 
22388      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25159      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
25218      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].JML operation contract.0 
25223      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
25627      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25778      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).JML operation contract.0.key 
25778      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).JML operation contract.0.key 
25778      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.2ns 
25781      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28368      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
28431      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].JML operation contract.0 
28434      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
28740      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
28931      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).JML operation contract.0.key 
28931      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).JML operation contract.0.key 
28931      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.7ns 
28932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31502      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
31545      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].JML operation contract.0 
31548      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
31955      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32139      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).JML operation contract.0.key 
32139      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).JML operation contract.0.key 
32140      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.4ns 
32140      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34704      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
34749      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].JML operation contract.0 
34752      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
35056      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35210      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).JML operation contract.0.key 
35210      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).JML operation contract.0.key 
35211      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 449.2ns 
35211      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
37771      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
37826      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].JML operation contract.0 
37834      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
38037      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38193      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).JML operation contract.0.key 
38193      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).JML operation contract.0.key 
38193      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.2ns 
38195      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
40756      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
40811      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].JML operation contract.0 
40813      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
41015      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41160      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).JML operation contract.0.key 
41161      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).JML operation contract.0.key 
41161      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.5ns 
41162      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
43691      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
43748      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].JML operation contract.0 
43753      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
43956      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44105      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).JML operation contract.0.key 
44106      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).JML operation contract.0.key 
44106      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.9ns 
44107      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46631      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
46679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].JML operation contract.0 
46690      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
46895      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47052      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).JML operation contract.0.key 
47053      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).JML operation contract.0.key 
47053      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.8ns 
47055      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49582      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
49624      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].JML operation contract.0 
49626      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
49828      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49976      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).JML operation contract.0.key 
49976      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).JML operation contract.0.key 
49976      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.5ns 
49977      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52486      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
52526      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].JML operation contract.0 
52529      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
52731      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52890      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).JML operation contract.0.key 
52891      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).JML operation contract.0.key 
52891      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.8ns 
52892      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55384      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
55422      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].JML operation contract.0 
55425      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
56033      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56222      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).JML operation contract.0.key 
56222      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).JML operation contract.0.key 
56222      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
56223      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58775      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
58814      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].JML operation contract.0 
58817      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
59224      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
220970     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts 
220975     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts 
312        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
322        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
345        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).JML normal_behavior operation contract.0.key 
467        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).JML normal_behavior operation contract.0.key 
493        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.58ms 
704        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1712       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1713       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1716       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1717       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2962       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8002       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.3s 
8126       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].JML normal_behavior operation contract.0 
8158       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 340.9ns 
9083       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9188       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).JML normal_behavior operation contract.0.key 
9189       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).JML normal_behavior operation contract.0.key 
9189       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 375ns 
9191       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12017      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.83s 
12096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].JML normal_behavior operation contract.0 
12099      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
12302      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12415      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).JML operation contract.0.key 
12417      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).JML operation contract.0.key 
12417      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 125.3ns 
12419      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15141      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
15207      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].JML operation contract.0 
15211      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
15426      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15535      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).JML normal_behavior operation contract.0.key 
15535      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).JML normal_behavior operation contract.0.key 
15536      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 733.6ns 
15538      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18197      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
18247      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].JML normal_behavior operation contract.0 
18250      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
18353      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18502      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).JML operation contract.0.key 
18502      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).JML operation contract.0.key 
18503      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.6ns 
18504      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21109      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
21155      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].JML operation contract.0 
21158      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
21259      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21377      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param_helper()).JML normal_behavior operation contract.0.key 
21377      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param_helper()).JML normal_behavior operation contract.0.key 
21377      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.1ns 
21381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23974      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
24018      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param_helper()].JML normal_behavior operation contract.0 
24021      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
24126      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24274      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).JML operation contract.0.key 
24275      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).JML operation contract.0.key 
24275      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.6ns 
24276      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26891      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
26935      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].JML operation contract.0 
26938      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
27041      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27171      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n9()).JML normal_behavior operation contract.0.key 
27171      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n9()).JML normal_behavior operation contract.0.key 
27171      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.1ns 
27172      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29801      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
29843      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n9()].JML normal_behavior operation contract.0 
29846      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
29948      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30076      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).JML operation contract.0.key 
30077      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).JML operation contract.0.key 
30077      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60ns 
30084      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32652      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
32693      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].JML operation contract.0 
32696      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
32798      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32974      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).JML operation contract.0.key 
32974      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).JML operation contract.0.key 
32974      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.8ns 
32976      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35560      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
35622      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].JML operation contract.0 
35625      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
35830      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
36017      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).JML normal_behavior operation contract.0.key 
36019      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).JML normal_behavior operation contract.0.key 
36019      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 151.6ns 
36021      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38565      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
38615      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].JML normal_behavior operation contract.0 
38617      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
38719      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38863      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).JML operation contract.0.key 
38863      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).JML operation contract.0.key 
38863      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.3ns 
38864      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41411      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
41451      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].JML operation contract.0 
41457      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
41659      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41806      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).JML operation contract.0.key 
41806      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).JML operation contract.0.key 
41806      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69ns 
41807      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44277      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
44314      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].JML operation contract.0 
44317      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
44532      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44675      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).JML operation contract.0.key 
44675      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).JML operation contract.0.key 
44676      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.1ns 
44677      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47165      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
47202      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].JML operation contract.0 
47204      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
47306      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47480      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).JML normal_behavior operation contract.0.key 
47480      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).JML normal_behavior operation contract.0.key 
47480      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.3ns 
47481      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49947      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
49994      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].JML normal_behavior operation contract.0 
49996      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
50098      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50253      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).JML normal_behavior operation contract.0.key 
50253      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).JML normal_behavior operation contract.0.key 
50253      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
50254      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52730      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
52776      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].JML normal_behavior operation contract.0 
52779      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
52881      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53028      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).JML operation contract.0.key 
53029      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).JML operation contract.0.key 
53029      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
53030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55526      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
55564      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].JML operation contract.0 
55567      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
55668      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55825      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).JML operation contract.0.key 
55826      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).JML operation contract.0.key 
55826      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102.8ns 
55827      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58294      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
58337      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].JML operation contract.0 
58341      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
58443      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58589      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).JML operation contract.0.key 
58590      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).JML operation contract.0.key 
58590      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.9ns 
58590      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61044      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
61079      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].JML operation contract.0 
61082      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
61183      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61343      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).JML normal_behavior operation contract.0.key 
61343      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).JML normal_behavior operation contract.0.key 
61343      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 379.5ns 
61344      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63795      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
63831      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].JML normal_behavior operation contract.0 
63834      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
63936      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64094      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).JML normal_behavior operation contract.0.key 
64095      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).JML normal_behavior operation contract.0.key 
64095      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 99.1ns 
64096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66527      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
66574      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].JML normal_behavior operation contract.0 
66576      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
66678      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66835      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).JML operation contract.0.key 
66836      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).JML operation contract.0.key 
66836      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 612.5ns 
66837      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69292      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
69344      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].JML operation contract.0 
69347      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
69450      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
290763     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts 
290764     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test LoopInvariants 
359        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
386        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
426        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).JML operation contract.0.key 
592        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).JML operation contract.0.key 
616        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.31ms 
842        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1719       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1719       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1721       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1721       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3048       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8552       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.71s 
8685       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].JML operation contract.0 
8748       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 347.7ns 
9785       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9906       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).JML operation contract.0.key 
9907       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).JML operation contract.0.key 
9907       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 302.8ns 
9910       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13157      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.25s 
13219      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].JML operation contract.0 
13223      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
13727      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13842      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).JML operation contract.0.key 
13842      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).JML operation contract.0.key 
13842      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 94ns 
13848      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16969      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.12s 
17030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].JML operation contract.0 
17033      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
17537      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
17676      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).JML operation contract.0.key 
17677      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).JML operation contract.0.key 
17677      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.9ns 
17679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.99s 
20727      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].JML operation contract.0 
20731      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
21936      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22074      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).JML operation contract.0.key 
22075      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).JML operation contract.0.key 
22075      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.4ns 
22076      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25069      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.99s 
25123      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].JML operation contract.0 
25126      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
26034      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
26223      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).JML operation contract.0.key 
26224      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).JML operation contract.0.key 
26224      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.9ns 
26225      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29180      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
29223      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].JML operation contract.0 
29226      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
30134      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30314      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).JML operation contract.0.key 
30315      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).JML operation contract.0.key 
30315      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.2ns 
30316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33281      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
33341      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].JML operation contract.0 
33345      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15ns 
34151      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
34310      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).JML operation contract.0.key 
34310      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).JML operation contract.0.key 
34310      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.7ns 
34311      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
37256      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
37309      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].JML operation contract.0 
37313      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
37816      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
37954      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).JML operation contract.0.key 
37956      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).JML operation contract.0.key 
37956      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 131.2ns 
37957      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
40912      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
40953      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].JML operation contract.0 
40955      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
41164      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41295      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).JML operation contract.0.key 
41296      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).JML operation contract.0.key 
41296      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 471ns 
41297      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44148      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
44188      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].JML operation contract.0 
44190      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
44396      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
44569      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).JML operation contract.0.key 
44570      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).JML operation contract.0.key 
44570      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 72.4ns 
44571      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47463      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
47503      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].JML operation contract.0 
47505      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
47908      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48065      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).JML operation contract.0.key 
48065      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).JML operation contract.0.key 
48066      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.2ns 
48067      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50931      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.86s 
50970      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].JML operation contract.0 
50972      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
51375      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
51539      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).JML operation contract.0.key 
51539      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).JML operation contract.0.key 
51539      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.1ns 
51540      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54409      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
54453      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].JML operation contract.0 
54457      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
54959      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55119      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).JML operation contract.0.key 
55120      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).JML operation contract.0.key 
55120      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.3ns 
55121      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58010      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
58047      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].JML operation contract.0 
58049      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
58352      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58499      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).JML operation contract.0.key 
58500      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).JML operation contract.0.key 
58500      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.9ns 
58501      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61345      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
61381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].JML operation contract.0 
61383      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
61588      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61758      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).JML normal_behavior operation contract.0.key 
61758      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).JML normal_behavior operation contract.0.key 
61758      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 441.9ns 
61759      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64609      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
64654      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].JML normal_behavior operation contract.0 
64656      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
64758      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64906      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).JML normal_behavior operation contract.0.key 
64906      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).JML normal_behavior operation contract.0.key 
64906      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.3ns 
64907      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
67778      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
67825      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].JML normal_behavior operation contract.0 
67828      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
68131      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
359225     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test LoopInvariants 
359227     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples 
376        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
397        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
420        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
539        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
557        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.98ms 
771        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1687       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1688       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1689       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1689       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3060       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8152       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.38s 
8280       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].JML operation contract.0 
8312       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 341.8ns 
8864       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
8964       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
8965       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
8966       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 337.1ns 
8970       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
11820      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
11902      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].JML operation contract.0 
11906      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
12010      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12112      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).JML normal_behavior operation contract.0.key 
12113      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).JML normal_behavior operation contract.0.key 
12114      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.1ns 
12115      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14912      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
14971      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].JML normal_behavior operation contract.0 
14975      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
15077      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15189      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).JML normal_behavior operation contract.0.key 
15190      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).JML normal_behavior operation contract.0.key 
15190      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.3ns 
15191      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17945      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
18030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].JML normal_behavior operation contract.0 
18036      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
18240      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18354      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).JML normal_behavior operation contract.0.key 
18354      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).JML normal_behavior operation contract.0.key 
18354      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 87.7ns 
18355      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21017      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
21066      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].JML normal_behavior operation contract.0 
21068      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
21172      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21288      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).JML normal_behavior operation contract.0.key 
21289      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).JML normal_behavior operation contract.0.key 
21289      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 115ns 
21290      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23887      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
23932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].JML normal_behavior operation contract.0 
23935      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
24040      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24162      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).JML normal_behavior operation contract.0.key 
24162      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).JML normal_behavior operation contract.0.key 
24162      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.6ns 
24164      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26781      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
26827      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].JML normal_behavior operation contract.0 
26829      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
26931      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27053      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).JML normal_behavior operation contract.0.key 
27054      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).JML normal_behavior operation contract.0.key 
27054      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.3ns 
27055      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29651      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
29700      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].JML normal_behavior operation contract.0 
29705      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15ns 
29807      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
29946      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.1.key 
29947      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.1.key 
29947      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109ns 
29948      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32500      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
32556      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].JML normal_behavior operation contract.1 
32559      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
32661      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32831      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.0.key 
32831      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.0.key 
32831      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.3ns 
32833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35390      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
35437      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].JML normal_behavior operation contract.0 
35441      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
35643      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35784      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).JML normal_behavior operation contract.0.key 
35785      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).JML normal_behavior operation contract.0.key 
35785      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 118.6ns 
35787      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38365      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
38406      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].JML normal_behavior operation contract.0 
38409      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
38511      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38665      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).JML operation contract.0.key 
38666      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).JML operation contract.0.key 
38666      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 78.9ns 
38667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41210      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
41263      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].JML operation contract.0 
41267      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
41369      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41508      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).JML normal_behavior operation contract.0.key 
41508      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).JML normal_behavior operation contract.0.key 
41509      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.3ns 
41510      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44043      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
44084      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].JML normal_behavior operation contract.0 
44086      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
44188      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44327      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).JML normal_behavior operation contract.0.key 
44327      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).JML normal_behavior operation contract.0.key 
44328      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 283ns 
44329      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46887      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
46928      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].JML normal_behavior operation contract.0 
46930      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
47035      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47190      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).JML normal_behavior operation contract.0.key 
47191      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).JML normal_behavior operation contract.0.key 
47191      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57ns 
47192      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49718      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
49760      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].JML normal_behavior operation contract.0 
49763      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
49865      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50010      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).JML normal_behavior operation contract.0.key 
50011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).JML normal_behavior operation contract.0.key 
50011      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 280.9ns 
50012      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52528      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
52566      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].JML normal_behavior operation contract.0 
52569      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
52670      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52821      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).JML normal_behavior operation contract.0.key 
52821      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).JML normal_behavior operation contract.0.key 
52821      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.5ns 
52822      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55309      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
55351      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].JML normal_behavior operation contract.0 
55356      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
55458      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55666      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).JML normal_behavior operation contract.0.key 
55667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).JML normal_behavior operation contract.0.key 
55667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
55668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58192      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
58229      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].JML normal_behavior operation contract.0 
58231      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
58335      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58512      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).JML normal_behavior operation contract.0.key 
58512      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).JML normal_behavior operation contract.0.key 
58512      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.7ns 
58514      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61012      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
61047      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].JML normal_behavior operation contract.0 
61050      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
61151      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61306      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).JML normal_behavior operation contract.0.key 
61306      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).JML normal_behavior operation contract.0.key 
61306      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.8ns 
61307      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63802      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
63839      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].JML normal_behavior operation contract.0 
63841      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
63943      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64102      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).JML normal_behavior operation contract.0.key 
64102      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).JML normal_behavior operation contract.0.key 
64102      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.7ns 
64103      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66623      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
66666      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].JML normal_behavior operation contract.0 
66669      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
66771      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66943      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).JML normal_behavior operation contract.0.key 
66943      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).JML normal_behavior operation contract.0.key 
66943      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.1ns 
66944      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69461      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
69497      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].JML normal_behavior operation contract.0 
69500      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
69603      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69766      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).JML normal_behavior operation contract.0.key 
69766      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).JML normal_behavior operation contract.0.key 
69767      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 93.2ns 
69767      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72243      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
72278      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].JML normal_behavior operation contract.0 
72280      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
72384      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72553      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).JML normal_behavior operation contract.0.key 
72553      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).JML normal_behavior operation contract.0.key 
72553      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.1ns 
72554      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
75057      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
75099      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].JML normal_behavior operation contract.0 
75104      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
75205      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
75423      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).JML normal_behavior operation contract.0.key 
75424      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).JML normal_behavior operation contract.0.key 
75424      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 98.1ns 
75425      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77890      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
77924      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].JML normal_behavior operation contract.0 
77926      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
78031      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
78204      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).JML normal_behavior operation contract.0.key 
78204      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).JML normal_behavior operation contract.0.key 
78204      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.9ns 
78205      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
80694      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
80734      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].JML normal_behavior operation contract.0 
80738      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.8ns 
80840      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
81033      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.1.key 
81033      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.1.key 
81033      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.4ns 
81035      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
83498      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
83532      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].JML normal_behavior operation contract.1 
83539      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
83641      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
83817      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.0.key 
83817      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.0.key 
83817      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.7ns 
83818      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
86273      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
86308      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].JML normal_behavior operation contract.0 
86312      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
86414      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
86597      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).JML normal_behavior operation contract.0.key 
86597      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).JML normal_behavior operation contract.0.key 
86598      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76ns 
86598      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
89062      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
89096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].JML normal_behavior operation contract.0 
89098      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
89203      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
89387      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).JML normal_behavior operation contract.0.key 
89387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).JML normal_behavior operation contract.0.key 
89387      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
89389      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
91906      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
91942      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].JML normal_behavior operation contract.0 
91945      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
92047      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
451646     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples 
451647     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects 
355        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
366        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
408        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).JML operation contract.0.key 
571        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).JML operation contract.0.key 
589        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.97ms 
827        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1855       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1855       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1858       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1859       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3089       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
6090       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8493       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.67s 
8672       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].JML operation contract.0 
8749       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 389.8ns 
9283       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9391       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).JML normal_behavior operation contract.0.key 
9392       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).JML normal_behavior operation contract.0.key 
9392       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 306ns 
9394       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10346      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12440      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.05s 
12517      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].JML normal_behavior operation contract.0 
12521      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
13126      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13258      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.1.key 
13259      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.1.key 
13259      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 135ns 
13263      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14196      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
16220      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
16285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].JML normal_behavior operation contract.1 
16289      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
16492      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16617      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.0.key 
16617      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.0.key 
16617      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 82.3ns 
16619      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17540      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
19522      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.9s 
19574      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].JML normal_behavior operation contract.0 
19577      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
19780      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19908      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).JML normal_behavior operation contract.0.key 
19908      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).JML normal_behavior operation contract.0.key 
19909      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.9ns 
19910      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20794      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
22733      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
22799      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].JML normal_behavior operation contract.0 
22801      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
22904      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23023      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).JML operation contract.0.key 
23024      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).JML operation contract.0.key 
23024      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 116.9ns 
23025      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23881      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
25823      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
25871      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.Naumann[object.Naumann::Pair_m(int,int)].JML operation contract.0 
25875      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
27383      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27543      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).JML operation contract.0.key 
27543      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).JML operation contract.0.key 
27543      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.1ns 
27544      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28395      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
30333      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.79s 
30381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].JML operation contract.0 
30384      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
30989      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
31164      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).JML operation contract.0.key 
31165      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).JML operation contract.0.key 
31165      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.3ns 
31166      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32064      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
34050      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
34098      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].JML operation contract.0 
34101      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
34304      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
34495      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.1.key 
34496      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.1.key 
34496      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58ns 
34497      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35380      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
37383      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
37430      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].JML operation contract.1 
37433      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
38538      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38722      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.0.key 
38722      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.0.key 
38723      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.7ns 
38723      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39618      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
41589      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
41634      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].JML operation contract.0 
41636      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
42542      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42713      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).JML operation contract.0.key 
42714      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).JML operation contract.0.key 
42714      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.5ns 
42715      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
43580      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
45479      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
45524      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_if_two_object_creation()].JML operation contract.0 
45527      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
46334      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46497      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).JML operation contract.0.key 
46497      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).JML operation contract.0.key 
46503      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.8ns 
46504      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47363      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
49287      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
49330      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].JML operation contract.0 
49332      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.3ns 
49936      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50098      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).JML normal_behavior operation contract.0.key 
50099      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).JML normal_behavior operation contract.0.key 
50099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.2ns 
50100      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50959      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
52911      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
52955      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].JML normal_behavior operation contract.0 
52957      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
53365      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53532      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.1.key 
53533      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.1.key 
53533      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.2ns 
53534      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54393      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
56352      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
56392      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].JML operation contract.1 
56395      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
56499      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56647      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.0.key 
56648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.0.key 
56648      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.7ns 
56649      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57493      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
59378      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
59429      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].JML operation contract.0 
59433      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
59535      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59697      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).JML operation contract.0.key 
59698      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).JML operation contract.0.key 
59698      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.9ns 
59699      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60529      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
62411      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
62451      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].JML operation contract.0 
62454      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
62660      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
62832      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).JML operation contract.0.key 
62833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).JML operation contract.0.key 
62833      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.4ns 
62834      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63657      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
65806      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
65852      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].JML operation contract.0 
65855      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
66158      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66386      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).JML operation contract.0.key 
66386      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).JML operation contract.0.key 
66386      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.6ns 
66392      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
67229      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
69142      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
69182      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].JML operation contract.0 
69184      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
69386      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69561      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML accessible clause.0.key 
69561      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML accessible clause.0.key 
69562      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 89.8ns 
69562      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70389      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
72258      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
72298      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].JML accessible clause.0 
72301      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
72403      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72569      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML normal_behavior operation contract.0.key 
72569      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML normal_behavior operation contract.0.key 
72570      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 806.1ns 
72571      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73409      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
75294      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
75333      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].JML normal_behavior operation contract.0 
75336      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
75439      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
75610      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).JML normal_behavior operation contract.0.key 
75611      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).JML normal_behavior operation contract.0.key 
75611      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.7ns 
75612      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
76461      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
78364      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
78413      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].JML normal_behavior operation contract.0 
78415      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
78738      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
78911      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/PasswordFile/passwordfile.SecurePasswordFile(passwordfile.SecurePasswordFile___userIndex()).JML accessible clause.0.key 
78912      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/PasswordFile/passwordfile.SecurePasswordFile(passwordfile.SecurePasswordFile___userIndex()).JML accessible clause.0.key 
78912      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.2ns 
78913      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
81430      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
81471      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof passwordfile.SecurePasswordFile[passwordfile.SecurePasswordFile::$userIndex()].JML accessible clause.0 
81473      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
81576      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
533581     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects 
533586     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting 
359        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
380        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
403        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).JML normal_behavior operation contract.0.key 
509        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).JML normal_behavior operation contract.0.key 
528        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.34ms 
741        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1633       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1633       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1635       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1635       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2872       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8481       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.74s 
8723       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].JML normal_behavior operation contract.0 
8831       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 805.5ns 
10273      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10412      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage((B)).JML normal_behavior operation contract.0.key 
10413      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage((B)).JML normal_behavior operation contract.0.key 
10413      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 283.5ns 
10416      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13851      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.43s 
13942      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage([B)].JML normal_behavior operation contract.0 
13945      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
14550      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14692      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).JML normal_behavior operation contract.0.key 
14693      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).JML normal_behavior operation contract.0.key 
14694      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 110.1ns 
14699      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17943      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.24s 
18035      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage()].JML normal_behavior operation contract.0 
18043      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
19558      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19715      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).JML normal_behavior operation contract.0.key 
19715      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).JML normal_behavior operation contract.0.key 
19715      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.5ns 
19718      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22941      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.22s 
23005      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].JML normal_behavior operation contract.0 
23009      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
23112      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).JML normal_behavior operation contract.0.key 
23284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).JML normal_behavior operation contract.0.key 
23284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.1ns 
23285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26531      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.25s 
26592      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].JML normal_behavior operation contract.0 
26595      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
26703      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
26833      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).JML normal_behavior operation contract.0.key 
26833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).JML normal_behavior operation contract.0.key 
26833      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.4ns 
26834      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29957      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.12s 
30041      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].JML normal_behavior operation contract.0 
30047      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
30149      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
30275      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment___rep()).JML accessible clause.0.key 
30275      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment___rep()).JML accessible clause.0.key 
30275      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 96.2ns 
30277      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33439      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.16s 
33496      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::$rep()].JML accessible clause.0 
33498      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
33603      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33761      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.1.key 
33761      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.1.key 
33761      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.9ns 
33763      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36828      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.07s 
36893      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].JML normal_behavior operation contract.1 
36895      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
43823      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44021      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.0.key 
44021      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.0.key 
44021      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.3ns 
44022      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47085      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.06s 
47142      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].JML normal_behavior operation contract.0 
47145      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 33.1ns 
55007      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55206      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Message(java.lang.Object___inv_()).JML accessible clause.0.key 
55206      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Message(java.lang.Object___inv_()).JML accessible clause.0.key 
55207      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63ns 
55208      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58294      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.08s 
58349      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Message[java.lang.Object::<inv>()].JML accessible clause.0 
58351      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
58554      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58726      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML accessible clause.0.key 
58727      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML accessible clause.0.key 
58727      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105.3ns 
58728      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61816      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.09s 
61870      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::resultReady()].JML accessible clause.0 
61873      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
63379      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63552      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML normal_behavior operation contract.0.key 
63552      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML normal_behavior operation contract.0.key 
63552      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.6ns 
63554      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66643      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.09s 
66698      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::resultReady()].JML normal_behavior operation contract.0 
66701      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
67305      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
67483      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onSendResult()).JML normal_behavior operation contract.0.key 
67484      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onSendResult()).JML normal_behavior operation contract.0.key 
67484      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.6ns 
67485      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70557      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.07s 
70609      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onSendResult()].JML normal_behavior operation contract.0 
70611      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
70816      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70980      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.1.key 
70982      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.1.key 
70982      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.4ns 
70983      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
74036      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.05s 
74087      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onCollectBallot(simple_evoting.Message)].JML normal_behavior operation contract.1 
74089      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
74292      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
74465      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.0.key 
74465      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.0.key 
74466      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 430.3ns 
74467      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77488      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.02s 
77548      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onCollectBallot(simple_evoting.Message)].JML normal_behavior operation contract.0 
77550      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
78156      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
78339      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(java.lang.Object___inv_()).JML accessible clause.0.key 
78340      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(java.lang.Object___inv_()).JML accessible clause.0.key 
78340      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.8ns 
78340      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
81344      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
81393      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[java.lang.Object::<inv>()].JML accessible clause.0 
81395      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
81600      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
81790      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
81790      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
81790      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56ns 
81791      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
84811      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.02s 
84861      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMTEnv[simple_evoting.SMTEnv::send(int,int,int,simple_evoting.Server,int)].JML normal_behavior operation contract.0 
84863      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
85166      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
85340      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
85341      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
85341      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.9ns 
85341      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
88344      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
88392      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].JML normal_behavior operation contract.0 
88394      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
88600      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
88774      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__publishResult()).JML normal_behavior operation contract.0.key 
88774      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__publishResult()).JML normal_behavior operation contract.0.key 
88774      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.1ns 
88775      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
91776      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
91843      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[simple_evoting.Setup::publishResult()].JML normal_behavior operation contract.0 
91847      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
92450      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
92647      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__main()).JML normal_behavior operation contract.0.key 
92647      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__main()).JML normal_behavior operation contract.0.key 
92647      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 513.2ns 
92648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
95665      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.02s 
95718      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[simple_evoting.Setup::main()].JML normal_behavior operation contract.0 
95720      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
129717     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
130031     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(java.lang.Object___inv_()).JML accessible clause.0.key 
130031     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(java.lang.Object___inv_()).JML accessible clause.0.key 
130031     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 159.2ns 
130032     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
133063     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
133128     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[java.lang.Object::<inv>()].JML accessible clause.0 
133130     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
137059     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
137383     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.1.key 
137383     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.1.key 
137383     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.4ns 
137384     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
140411     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
140459     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].JML normal_behavior operation contract.1 
140461     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
146864     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
147095     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.0.key 
147095     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.0.key 
147095     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.7ns 
147096     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
150108     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.01s 
150156     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].JML normal_behavior operation contract.0 
150160     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
157502     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
157746     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(java.lang.Object___inv_()).JML accessible clause.0.key 
157746     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(java.lang.Object___inv_()).JML accessible clause.0.key 
157747     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.2ns 
157747     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
160733     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.99s 
160794     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[java.lang.Object::<inv>()].JML accessible clause.0 
160796     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
160998     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
694939     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting 
694940     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting_nomacro 
335        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
340        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
363        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.key 
470        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.key 
499        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.99ms 
708        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1791       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1792       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1793       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1793       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3175       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8118       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.41s 
8276       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].Non-interference contract.0 
8308       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 430.6ns 
20545      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
20735      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.key 
20737      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.key 
20738      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 301.8ns 
20742      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23456      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
23515      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].Non-interference contract.0 
23519      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
23823      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24012      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.key 
24015      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.key 
24015      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.22ms 
24017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
26741      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].Non-interference contract.0 
26747      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
27154      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27280      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.key 
27282      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.key 
27282      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.3ns 
27284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29882      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
29928      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].Non-interference contract.0 
29931      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
30134      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30256      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.key 
30256      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.key 
30257      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.4ns 
30258      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32806      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
32852      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].Non-interference contract.0 
32856      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
33060      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
728304     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting_nomacro 
728305     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ConditionalConfidential_nomacro 
728306     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ConditionalConfidential_nomacro 
728307     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample_nomacro 
358        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
365        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
398        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.key 
523        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.key 
548        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.02ms 
781        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1830       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1830       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1832       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1833       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3345       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8373       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.59s 
8563       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].Non-interference contract.0 
8601       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 362.6ns 
11625      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
740274     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample_nomacro 
740276     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking_nomacro 
344        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
347        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
374        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
493        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
511        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.9ms 
746        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1838       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1839       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1842       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1842       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3263       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8718       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.97s 
8872       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].Non-interference contract.0 
8951       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 378.7ns 
12667      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12828      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.key 
12829      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.key 
12829      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 286.4ns 
12831      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15909      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.08s 
16011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].Non-interference contract.0 
16019      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
17024      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
17161      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.key 
17161      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.key 
17161      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.6ns 
17164      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20070      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
20139      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].Non-interference contract.0 
20146      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
20450      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20587      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.key 
20587      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.key 
20587      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 116ns 
20589      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23407      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
23469      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].Non-interference contract.0 
23472      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
23775      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23926      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.key 
23927      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.key 
23927      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 575.9ns 
23929      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26717      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.79s 
26809      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].Non-interference contract.0 
26812      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
59311      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
59561      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
59562      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
59562      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.1ns 
59563      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62209      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
62298      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].Non-interference contract.0 
62303      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
63911      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64185      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.key 
64185      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.key 
64185      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.4ns 
64186      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66879      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
66951      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].Non-interference contract.0 
66954      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
67660      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
67821      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.key 
67821      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.key 
67821      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.4ns 
67823      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70524      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
70588      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].Non-interference contract.0 
70590      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
70795      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70964      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.key 
70964      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.key 
70964      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.1ns 
70965      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73614      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
73683      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].Non-interference contract.0 
73686      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
73988      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
814580     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking_nomacro 
814582     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts_nomacro 
415        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
422        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
444        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key 
553        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key 
572        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.49ms 
787        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1763       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1763       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1765       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1765       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3144       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8463       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.68s 
8661       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].Non-interference contract.0 
8737       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 374.9ns 
10078      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10215      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key 
10215      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key 
10215      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 216.7ns 
10217      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13065      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
13141      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].Non-interference contract.0 
13144      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
13750      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13894      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key 
13895      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key 
13895      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 656.1ns 
13897      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16491      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
16559      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].Non-interference contract.0 
16562      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
17209      WARN  Thread-5        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([loop_invariant @ file IFBlockExamples.java @ line 255])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

17290      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_l_B)(_l_A_Before<<origin(requires @ file IFBlockExamples.java @ line 250) ([])>>)),elem-update(exc_B)(null)),elem-update(l1_1)(l1_Before<<origin(requires @ file IFBlockExamples.java @ line 250) ([])>>)),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 256) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_0 = _l_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#73 = false;
    java.lang.Throwable thrownExc#75;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#74) {
      exc#73 = true;
      thrownExc#75 = e#74;
    }
  }
}\> (and(imp(equals(exc#73,TRUE),\<{
  try {
    method-frame (
      source=while_block_insecure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#75;
      }
      {
        l1_1++;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#73,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([loop_invariant @ file IFBlockExamples.java @ line 255])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

17290      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17442      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key 
17443      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key 
17443      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.2ns 
17444      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20097      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
20179      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].Non-interference contract.0 
20183      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
20736      WARN  Thread-7        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([loop_invariant @ file IFBlockExamples.java @ line 231])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

20793      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_l_B)(_l_A_Before<<origin(requires @ file IFBlockExamples.java @ line 226) ([])>>)),elem-update(exc_B)(null)),elem-update(l1_1)(l1_Before<<origin(requires @ file IFBlockExamples.java @ line 226) ([])>>)),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 232) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_0 = _l_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#73 = false;
    java.lang.Throwable thrownExc#75;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#74) {
      exc#73 = true;
      thrownExc#75 = e#74;
    }
  }
}\> (and(imp(equals(exc#73,TRUE),\<{
  try {
    method-frame (
      source=while_block_secure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#75;
      }
      {
        l1_1++;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#73,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([loop_invariant @ file IFBlockExamples.java @ line 231])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

20794      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
20951      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key 
20951      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key 
20952      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 74ns 
20953      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23497      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
23544      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].Non-interference contract.0 
23548      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
24188      WARN  Thread-9        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([loop_invariant @ file IFBlockExamples.java @ line 212])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(l1_1_After_0_A,l1_1_Before_0_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(l1_1_After_0_B,l1_1_Before_0_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

24259      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_l_B)(_l_A_Before),elem-update(exc_B)(null)),parallel-upd(elem-update(l1_1)(anonOut_l1_1)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([])>>,elem-update(heap)(heap_After_BLOCK)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([])>>)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([assignable @ file IFBlockExamples.java @ line 206])>>)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([assignable @ file IFBlockExamples.java @ line 206])>>,update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 213) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_2 = _l_B > 0;
  }
}\] (equals(b_2,TRUE)),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#107 = false;
    java.lang.Throwable thrownExc#109;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#108) {
      exc#107 = true;
      thrownExc#109 = e#108;
    }
  }
}\> (and(imp(equals(exc#107,TRUE),\<{
  try {
    method-frame (
      source=block_while_secure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#109;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#107,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([loop_invariant @ file IFBlockExamples.java @ line 212])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(l1_1_After_0_A,l1_1_Before_0_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(l1_1_After_0_B,l1_1_Before_0_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

24269      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
24434      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key 
24435      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key 
24435      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 91ns 
24436      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26926      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
26984      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].Non-interference contract.0 
26987      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
28997      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
29196      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key 
29196      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key 
29196      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.5ns 
29197      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31727      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
31774      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].Non-interference contract.0 
31776      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
33707      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33925      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key 
33925      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key 
33925      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 268.1ns 
33926      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36458      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
36503      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].Non-interference contract.0 
36507      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
38317      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38584      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key 
38585      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key 
38585      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.3ns 
38586      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41048      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
41096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].Non-interference contract.0 
41099      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
43239      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
43470      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key 
43471      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key 
43471      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 111.4ns 
43472      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45935      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
45977      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].Non-interference contract.0 
45979      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
46584      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46786      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key 
46787      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key 
46787      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
46788      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49236      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
49281      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].Non-interference contract.0 
49283      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
49687      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49861      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key 
49862      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key 
49862      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102ns 
49863      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52345      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
52387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].Non-interference contract.0 
52389      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
52796      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52970      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key 
52971      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key 
52971      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.4ns 
52972      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55409      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
55450      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].Non-interference contract.0 
55453      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
55957      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
56134      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key 
56135      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key 
56135      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102ns 
56136      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58617      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
58667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].Non-interference contract.0 
58669      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
59275      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59471      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key 
59471      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key 
59471      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.7ns 
59472      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61905      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
61968      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].Non-interference contract.0 
61971      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
62676      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
62914      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key 
62915      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key 
62915      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.3ns 
62916      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65322      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
65359      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].Non-interference contract.0 
65361      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
68073      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
68304      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key 
68305      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key 
68305      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.9ns 
68306      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70711      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
70747      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].Non-interference contract.0 
70749      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
72980      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
887955     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts_nomacro 
887960     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts_nomacro 
388        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
397        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
455        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.key 
709        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.key 
727        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2ms 
956        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1865       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1870       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1872       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1873       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3394       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8508       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.55s 
8713       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].Non-interference contract.0 
8782       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 34.94ms 
12577      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12725      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.key 
12726      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.key 
12726      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 308.4ns 
12728      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15566      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
15657      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].Non-interference contract.0 
15665      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
16185      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16355      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.key 
16357      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.key 
16357      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 126.4ns 
16366      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19041      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
19097      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].Non-interference contract.0 
19100      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
19403      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19533      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.key 
19535      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.key 
19535      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 136.2ns 
19536      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22079      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
22131      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].Non-interference contract.0 
22134      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
22336      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22455      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.key 
22456      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.key 
22456      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.5ns 
22457      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24965      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
25011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].Non-interference contract.0 
25014      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
25216      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25410      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.key 
25410      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.key 
25411      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.4ns 
25412      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27970      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
28016      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].Non-interference contract.0 
28019      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
29030      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
29166      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.key 
29167      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.key 
29167      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64ns 
29168      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31645      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
31688      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].Non-interference contract.0 
31691      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
31895      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32038      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.key 
32039      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.key 
32039      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.1ns 
32040      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34523      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
34578      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].Non-interference contract.0 
34583      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
35292      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
35444      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.key 
35444      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.key 
35444      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.7ns 
35450      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
37903      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
37944      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].Non-interference contract.0 
37947      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
38051      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38194      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.key 
38195      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.key 
38195      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 631.3ns 
38196      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
40629      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
40669      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].Non-interference contract.0 
40672      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
41700      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41862      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.key 
41862      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.key 
41862      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.9ns 
41863      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44311      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
44355      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].Non-interference contract.0 
44357      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
44861      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45062      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.key 
45062      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.key 
45062      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.7ns 
45066      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47450      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
47491      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].Non-interference contract.0 
47493      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
47699      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47840      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.key 
47840      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.key 
47840      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.4ns 
47841      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50255      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
50293      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].Non-interference contract.0 
50295      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
50497      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50657      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.key 
50658      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.key 
50658      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.3ns 
50659      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
53043      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
53083      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].Non-interference contract.0 
53085      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
53190      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53348      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.key 
53348      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.key 
53348      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.4ns 
53350      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55735      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.39s 
55773      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].Non-interference contract.0 
55775      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
56078      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56258      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.key 
56258      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.key 
56258      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.6ns 
56259      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58634      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
58672      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].Non-interference contract.0 
58674      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
58878      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
59051      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.key 
59051      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.key 
59051      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
59052      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61416      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
61452      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].Non-interference contract.0 
61454      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
61659      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61837      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.key 
61837      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.key 
61837      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 414.3ns 
61839      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64221      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
64270      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].Non-interference contract.0 
64272      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
64374      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64530      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.key 
64531      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.key 
64531      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105.8ns 
64532      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66998      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
67034      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].Non-interference contract.0 
67036      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
67138      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
67296      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.key 
67296      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.key 
67297      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 400.5ns 
67298      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69710      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
69745      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].Non-interference contract.0 
69747      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
69951      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
958335     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts_nomacro 
958336     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test LoopInvariants_nomacro 
364        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
370        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
412        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key 
575        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key 
599        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.92ms 
821        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1708       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1712       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1715       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1715       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3057       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8396       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.57s 
8528       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].Non-interference contract.0 
8597       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 375.8ns 
10083      WARN  Thread-1        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([loop_invariant @ file IFLoopExamples.java @ line 458])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

10158      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(x_B),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,self_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 459) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_while_3(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 459) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([loop_invariant @ file IFLoopExamples.java @ line 458])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

10160      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
10288      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key 
10289      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key 
10290      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 271.7ns 
10292      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13368      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.08s 
13432      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].Non-interference contract.0 
13436      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
14367      WARN  Thread-3        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([loop_invariant @ file IFLoopExamples.java @ line 438])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

14462      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 431) ([])>>),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,selfAtPost_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 439) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while_2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 439) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([loop_invariant @ file IFLoopExamples.java @ line 438])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

14468      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
14668      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key 
14668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key 
14668      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.6ns 
14672      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17756      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.08s 
17813      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].Non-interference contract.0 
17821      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
18613      WARN  Thread-5        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([loop_invariant @ file IFLoopExamples.java @ line 418])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

18644      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 411) ([])>>),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,selfAtPost_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 419) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while_4(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 419) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([loop_invariant @ file IFLoopExamples.java @ line 418])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

18654      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
18816      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key 
18818      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key 
18818      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 111.8ns 
18819      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21738      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
21788      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].Non-interference contract.0 
21791      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
22200      WARN  Thread-7        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([loop_invariant @ file IFLoopExamples.java @ line 376])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

22298      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 369) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 377) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 377) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([loop_invariant @ file IFLoopExamples.java @ line 376])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

22305      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
22452      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key 
22452      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key 
22452      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.6ns 
22455      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25361      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
25409      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].Non-interference contract.0 
25411      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
25939      WARN  Thread-9        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([loop_invariant @ file IFLoopExamples.java @ line 335])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

26021      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(x_B)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 336) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 336) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([loop_invariant @ file IFLoopExamples.java @ line 335])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

26023      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
26176      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key 
26176      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key 
26176      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.7ns 
26177      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29021      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
29065      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].Non-interference contract.0 
29067      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
29455      WARN  Thread-11       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([loop_invariant @ file IFLoopExamples.java @ line 294])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

29485      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 287) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 295) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 295) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([loop_invariant @ file IFLoopExamples.java @ line 294])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

29486      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
29671      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key 
29671      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key 
29671      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.3ns 
29672      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32481      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
32525      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].Non-interference contract.0 
32528      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
32900      WARN  Thread-13       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([loop_invariant @ file IFLoopExamples.java @ line 253])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

32933      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 246) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 254) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 254) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([loop_invariant @ file IFLoopExamples.java @ line 253])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

32942      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33155      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key 
33156      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key 
33156      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101ns 
33157      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35967      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
36010      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].Non-interference contract.0 
36013      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
36399      WARN  Thread-15       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([loop_invariant @ file IFLoopExamples.java @ line 223])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

36423      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 216) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 224) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_nestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 224) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([loop_invariant @ file IFLoopExamples.java @ line 223])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

36424      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
36592      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key 
36592      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key 
36592      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.4ns 
36593      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39369      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
39410      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].Non-interference contract.0 
39413      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
39818      WARN  Thread-17       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([loop_invariant @ file IFLoopExamples.java @ line 204])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

39917      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(x_B)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 205) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=notSecure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 205) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([loop_invariant @ file IFLoopExamples.java @ line 204])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

39918      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
40088      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key 
40089      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key 
40090      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105.6ns 
40091      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42866      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
42916      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].Non-interference contract.0 
42919      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
43079      WARN  Thread-19       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),not(equals(self_A_A,null))),equals(boolean::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([loop_invariant @ file IFLoopExamples.java @ line 185])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),imp(not(equals(b_Before_A,TRUE)),and(and(and(equals(self_A_After_LOOP_A,self_A_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b)))),equals(_x_A_After_A,_x_A_Before_A)),equals(heap_After_LOOP_A,heap_Before_LOOP_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),not(equals(self_A_B,null))),equals(boolean::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),geq(_x_A_Before_B,Z(1(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))),imp(not(equals(b_Before_B,TRUE)),and(and(and(equals(self_A_After_LOOP_B,self_A_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b)))),equals(_x_A_After_B,_x_A_Before_B)),equals(heap_After_LOOP_B,heap_Before_LOOP_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

43122      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_A<<anonHeapFunction>>),elem-update(_x_A)(x_A))<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>,elem-update(exc_A)(null)<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>,update-application(parallel-upd(elem-update(heapBefore_LOOP)(heap),elem-update(_x_ABefore_LOOP)(_x_A)),update-application(parallel-upd(elem-update(_x_A)(_x_A_0),elem-update(heap)(anon(heap,singleton(self_A,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 186) ([])>>,anon_heap_LOOP<<anonHeapFunction>>))),update-application(elem-update(variant)(_x_A),imp(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    boolean b = _x_A > 0;
  }
}\] (equals(b,TRUE)),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    boolean exc#3 = false;
    java.lang.Throwable thrownExc#5;
    try {
      {
        if (_x_A > 0) {
          this.low = this.low + 1;
          _x_A = _x_A - 1;
        }
      }
    } catch (java.lang.Throwable e#4) {
      exc#3 = true;
      thrownExc#5 = e#4;
    }
  }
}\> (and(imp(equals(exc#3,TRUE),\<{
  try {
    method-frame (
      source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
      this=self_A
    ) {
      {
        throw thrownExc#5;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_A = e;
  }
}\> (not(and(and(equals(self_A,selfAtPost_A),equals(exc_A,excAtPost_A)),equals(heapAtPost_A,heap))<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>),imp(not(equals(exc#3,TRUE)),and(and(geq(_x_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_A,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 186) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP,o,f)))))),prec(_x_A,variant)))<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>))<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),not(equals(self_A_A,null))),equals(boolean::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([loop_invariant @ file IFLoopExamples.java @ line 185])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),imp(not(equals(b_Before_A,TRUE)),and(and(and(equals(self_A_After_LOOP_A,self_A_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b)))),equals(_x_A_After_A,_x_A_Before_A)),equals(heap_After_LOOP_A,heap_Before_LOOP_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),not(equals(self_A_B,null))),equals(boolean::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),geq(_x_A_Before_B,Z(1(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))),imp(not(equals(b_Before_B,TRUE)),and(and(and(equals(self_A_After_LOOP_B,self_A_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b)))),equals(_x_A_After_B,_x_A_Before_B)),equals(heap_After_LOOP_B,heap_Before_LOOP_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

43122      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
43337      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key 
43338      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key 
43338      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.6ns 
43339      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46195      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.86s 
46261      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].Non-interference contract.0 
46264      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
47162      WARN  Thread-21       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([loop_invariant @ file IFLoopExamples.java @ line 165])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

47179      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#))),elem-update(heap)(heap_After_LOOP_0))),update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 166) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 168) ([])>>),imp(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=insecure_twoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 166) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 168) ([])>>,variant_2)))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([loop_invariant @ file IFLoopExamples.java @ line 165])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

47180      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
47446      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key 
47447      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key 
47448      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 125.9ns 
47448      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50247      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
50294      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].Non-interference contract.0 
50296      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
51505      WARN  Thread-23       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([loop_invariant @ file IFLoopExamples.java @ line 135])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

51603      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#)))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([])>>,elem-update(heap)(heap_After_LOOP_0)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([])>>)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>,update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 136) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 138) ([])>>),imp(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 136) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 138) ([])>>,variant_2)))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([loop_invariant @ file IFLoopExamples.java @ line 135])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

51604      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
51825      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key 
51825      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key 
51825      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.6ns 
51826      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54708      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
54750      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].Non-interference contract.0 
54752      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
55396      WARN  Thread-25       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([loop_invariant @ file IFLoopExamples.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

55461      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#))),elem-update(heap)(heap_After_LOOP_0))),update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 106) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 108) ([])>>),imp(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=secure_twoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 106) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 108) ([])>>,variant_2)))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([loop_invariant @ file IFLoopExamples.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

55462      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
55666      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key 
55667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key 
55667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 380.1ns 
55668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58439      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
58479      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].Non-interference contract.0 
58481      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
58903      WARN  Thread-27       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([loop_invariant @ file IFLoopExamples.java @ line 74])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(z_1_After_A,z_1_Before_A)),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(z_1_After_B,z_1_Before_B)),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

58994      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 66) ([])>>)),elem-update(exc_B)(null)),elem-update(z_1)(Z(2(#)))),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(z_1Before_LOOP)(z_1)),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(parallel-upd(elem-update(z_1)(z_1_0),elem-update(_x_B)(_x_B_0)),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 75) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#29 = false;
    java.lang.Throwable thrownExc#31;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          z_1 = z_1 + _x_B;
        }
      }
    } catch (java.lang.Throwable e#30) {
      exc#29 = true;
      thrownExc#31 = e#30;
    }
  }
}\> (and(imp(equals(exc#29,TRUE),\<{
  try {
    method-frame (
      source=loc_secure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#31;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#29,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 75) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([loop_invariant @ file IFLoopExamples.java @ line 74])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(z_1_After_A,z_1_Before_A)),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(z_1_After_B,z_1_Before_B)),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

58995      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
59173      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key 
59174      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key 
59174      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
59175      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61944      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
61987      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].Non-interference contract.0 
61989      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
62338      WARN  Thread-29       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([loop_invariant @ file IFLoopExamples.java @ line 54])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

62393      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 47) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 55) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 55) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([loop_invariant @ file IFLoopExamples.java @ line 54])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

62402      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
62679      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key 
62679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key 
62680      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71ns 
62680      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65420      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
65468      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].Non-interference contract.0 
65471      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
65572      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65759      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key 
65759      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key 
65759      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 94.6ns 
65760      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68537      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
68583      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].Non-interference contract.0 
68587      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 20.1ns 
69005      WARN  Thread-33       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([loop_invariant @ file IFLoopExamples.java @ line 22])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(y_1)(y_1_Before_A))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0)))),equals(y_1_After_A,y_1_Before_A)),equals(x_1_After_A,x_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(y_1)(y_1_Before_B))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0)))),equals(y_1_After_B,y_1_Before_B)),equals(x_1_After_B,x_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

69093      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_secret_B)(secret_B)),elem-update(exc_B)(null)),elem-update(x_1)(Z(0(#)))),elem-update(y_1)(Z(0(#)))),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(y_1Before_LOOP)(y_1)),elem-update(x_1Before_LOOP)(x_1)),update-application(parallel-upd(parallel-upd(elem-update(y_1)(y_1_0),elem-update(x_1)(x_1_0)),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 24) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(Z(0(1(#))),y_1)<<origin(decreases @ file IFLoopExamples.java @ line 25) ([])>>),imp(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = y_1 < 10;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#31 = false;
    java.lang.Throwable thrownExc#33;
    try {
      {
        if (y_1 < 10) {
          print(x_1);
          if (y_1 == 5) {
            x_1 = _secret_B;
            y_1 = 9;
          }
          x_1++;
          y_1++;
        }
      }
    } catch (java.lang.Throwable e#32) {
      exc#31 = true;
      thrownExc#33 = e#32;
    }
  }
}\> (and(imp(equals(exc#31,TRUE),\<{
  try {
    method-frame (
      source=hammer(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#33;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#31,TRUE)),and(and(and(leq(Z(0(#)),y_1),leq(y_1,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 24) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(Z(0(1(#))),y_1)<<origin(decreases @ file IFLoopExamples.java @ line 25) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([loop_invariant @ file IFLoopExamples.java @ line 22])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(y_1)(y_1_Before_A))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0)))),equals(y_1_After_A,y_1_Before_A)),equals(x_1_After_A,x_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(y_1)(y_1_Before_B))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0)))),equals(y_1_After_B,y_1_Before_B)),equals(x_1_After_B,x_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

69094      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
1027814    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test LoopInvariants_nomacro 
1027816    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples_nomacro 
382        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
397        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
437        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
547        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
566        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.38ms 
786        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1636       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1637       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1638       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1638       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3326       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8846       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 8.06s 
8990       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
9022       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 307.8ns 
9986       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
10098      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
10099      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
10099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 266.5ns 
10102      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13225      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.12s 
13296      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
13304      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 32ns 
13709      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13826      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.key 
13827      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.key 
13827      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.6ns 
13829      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16759      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
16840      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].Non-interference contract.0 
16845      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
16948      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
17119      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.key 
17119      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.key 
17119      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.4ns 
17122      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19945      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
20023      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].Non-interference contract.0 
20029      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
20332      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20486      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.key 
20486      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.key 
20486      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.9ns 
20489      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23300      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
23348      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].Non-interference contract.0 
23352      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
23561      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23679      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.key 
23680      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.key 
23680      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 115.1ns 
23681      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26478      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
26524      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].Non-interference contract.0 
26527      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
26831      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
27001      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.key 
27001      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.key 
27001      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.3ns 
27002      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29772      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
29836      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].Non-interference contract.0 
29840      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
30142      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30294      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.key 
30295      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.key 
30296      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 75.6ns 
30296      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33046      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
33090      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].Non-interference contract.0 
33093      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
33197      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33385      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.key 
33386      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.key 
33387      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.1ms 
33388      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36117      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
36163      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.1 
36166      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
36872      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
37016      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.key 
37016      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.key 
37016      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.4ns 
37017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39731      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
39778      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.0 
39781      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
41510      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
41678      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.key 
41678      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.key 
41678      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.7ns 
41679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44398      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
44445      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].Non-interference contract.0 
44448      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
44752      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44907      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.key 
44907      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.key 
44907      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.9ns 
44908      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47593      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
47638      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].Non-interference contract.0 
47640      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
47745      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47893      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.key 
47894      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.key 
47894      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.3ns 
47895      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50596      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
50636      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].Non-interference contract.0 
50638      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
50845      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50995      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.key 
50996      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.key 
50996      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.2ns 
50997      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
53653      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
53699      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].Non-interference contract.0 
53704      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
53909      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
54064      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.key 
54064      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.key 
54064      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.7ns 
54065      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56741      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
56780      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].Non-interference contract.0 
56782      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
56888      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57065      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.key 
57065      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.key 
57066      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.2ns 
57066      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
59710      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
59761      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].Non-interference contract.0 
59763      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
59969      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
60130      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.key 
60130      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.key 
60130      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.5ns 
60131      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62810      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
62848      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].Non-interference contract.0 
62851      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
62953      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63109      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.key 
63109      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.key 
63109      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.3ns 
63111      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65772      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
65810      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].Non-interference contract.0 
65813      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
65916      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66074      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.key 
66074      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.key 
66074      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54ns 
66075      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68746      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
68784      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].Non-interference contract.0 
68786      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
68888      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69054      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.key 
69055      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.key 
69055      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.7ns 
69056      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71741      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
71780      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].Non-interference contract.0 
71782      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
71884      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72047      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.key 
72047      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.key 
72047      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.2ns 
72048      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
74718      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
74756      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].Non-interference contract.0 
74758      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
74861      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
75029      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.key 
75029      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.key 
75029      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 81.5ns 
75030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77653      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
77690      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].Non-interference contract.0 
77692      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
77796      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
77985      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.key 
77985      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.key 
77986      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 90.4ns 
77986      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
80667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
80704      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].Non-interference contract.0 
80706      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
81008      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
81219      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.key 
81219      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.key 
81219      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.1ns 
81220      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
83892      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
83929      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].Non-interference contract.0 
83931      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
84137      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
84315      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.key 
84316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.key 
84316      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.3ns 
84317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
86992      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
87028      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].Non-interference contract.0 
87030      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
87134      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
87313      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.key 
87315      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.key 
87315      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.7ns 
87316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
89959      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
89997      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].Non-interference contract.0 
89999      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.3ns 
90302      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
90485      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.key 
90485      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.key 
90485      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.4ns 
90486      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
93104      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
93141      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.1 
93143      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
93345      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
93528      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.key 
93528      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.key 
93528      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 90.5ns 
93529      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
96151      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
96198      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.0 
96200      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.3ns 
96405      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
96607      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.key 
96608      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.key 
96608      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54ns 
96609      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
99274      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
99325      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].Non-interference contract.0 
99327      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
99531      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
99779      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.key 
99780      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.key 
99780      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 52.7ns 
99781      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
102390     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
102424     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].Non-interference contract.0 
102427     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
102528     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
1130742    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples_nomacro 
1130743    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects_nomacro 
341        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
351        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
378        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key 
489        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key 
520        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.92ms 
750        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1513       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1513       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3019       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5782       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8236       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.49s 
8380       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].Non-interference contract.0 
8460       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 364.4ns 
9305       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9419       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key 
9420       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key 
9420       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 784.5ns 
9423       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10385      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12420      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
12492      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].Non-interference contract.0 
12500      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 30.2ns 
13808      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13949      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key 
13951      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key 
13951      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 113ns 
13952      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14928      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
16921      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
16983      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.1 
16986      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
17497      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17643      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key 
17644      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key 
17644      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.6ns 
17645      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18579      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
20533      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
20585      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.0 
20587      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
20991      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21137      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key 
21138      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key 
21138      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.3ns 
21139      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22002      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
23890      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
23948      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].Non-interference contract.0 
23950      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
24054      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24183      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key 
24183      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key 
24183      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.3ns 
24184      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25035      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
26928      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
26977      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].Non-interference contract.0 
26980      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
30381      WARN  Thread-11       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC, origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>)<<origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0)))),equals(i_1_After_A,i_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0)))),equals(i_1_After_B,i_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(not(equals(b_0_Before_A,TRUE)),not(equals(b_0_Before_B,TRUE))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

30426      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_a_B)(a_B)),elem-update(exc_B)(null)),elem-update(i_1)(Z(0(#)))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(i_1Before_LOOP)(i_1)),update-application(parallel-upd(elem-update(i_1)(i_1_0),elem-update(heap)(anon(heap,allFields(_a_B)<<origin(assignable @ file ObjectOrientation.java @ line 111) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(length(_a_B),i_1)<<origin(decreases @ file ObjectOrientation.java @ line 112) ([])>>),imp(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    boolean b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    boolean exc#31 = false;
    java.lang.Throwable thrownExc#33;
    try {
      {
        if (i_1 < _a_B.length) {
          {
            _a_B[i_1] = new Object();
          }
          i_1++;
        }
      }
    } catch (java.lang.Throwable e#32) {
      exc#31 = true;
      thrownExc#33 = e#32;
    }
  }
}\> (and(imp(equals(exc#31,TRUE),\<{
  try {
    method-frame (
      source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
      this=self_B
    ) {
      {
        throw thrownExc#33;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#31,TRUE)),and(and(and(and(leq(Z(0(#)),i_1),leq(i_1,length(_a_B)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B,null)),equals(java.lang.Object[]::exactInstance(_a_B),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,allFields(_a_B)<<origin(assignable @ file ObjectOrientation.java @ line 111) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(length(_a_B),i_1)<<origin(decreases @ file ObjectOrientation.java @ line 112) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC, origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>)<<origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0)))),equals(i_1_After_A,i_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0)))),equals(i_1_After_B,i_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(not(equals(b_0_Before_A,TRUE)),not(equals(b_0_Before_B,TRUE))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

30427      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
30601      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key 
30602      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key 
30602      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.8ns 
30603      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31428      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
33350      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
33418      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].Non-interference contract.0 
33420      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
33925      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
34140      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key 
34141      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key 
34141      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 98.1ns 
34142      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34976      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
36854      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
36907      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.1 
36909      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
56207      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
56408      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key 
56408      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key 
56408      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 78.4ns 
56409      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57237      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
59081      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
59138      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].Non-interference contract.0 
59141      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
77912      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
78172      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key 
78172      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key 
78173      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102.7ns 
78173      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
78982      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
80801      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
80856      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].Non-interference contract.0 
80859      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
94143      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
94392      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key 
94392      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key 
94393      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.3ns 
94393      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
95223      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
97037      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
97079      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.1 
97082      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
105625     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
105822     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key 
105822     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key 
105822     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 362.1ns 
105823     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
106651     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
108492     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
108534     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.0 
108536     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
108742     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
108916     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key 
108916     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key 
108916     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 75.9ns 
108917     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
109723     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
111543     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
111595     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].Non-interference contract.0 
111597     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
112102     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
112263     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key 
112263     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key 
112264     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 551.3ns 
112265     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
113073     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
114924     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
114964     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].Non-interference contract.0 
114966     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
115270     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
115437     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key 
115437     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key 
115438     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.3ns 
115438     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
116239     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
118112     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
118152     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].Non-interference contract.0 
118155     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
118958     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
119174     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key 
119175     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key 
119176     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.1ms 
119177     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
120021     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
121917     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
121959     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].Non-interference contract.0 
121961     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
122065     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
122225     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key 
122226     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key 
122226     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 85ns 
122227     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
123035     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
124879     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
124919     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].Non-interference contract.0 
124921     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
126431     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1257545    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects_nomacro 
1257547    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting_nomacro 
361        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
361        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
445        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key 
641        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key 
687        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 5.21ms 
923        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1769       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1770       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1776       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1776       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2993       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8906       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.98s 
9066       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].Non-interference contract.0 
9156       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 341.2ns 
11451      WARN  Thread-1        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>)<<origin(loop_invariant @ file Environment.java @ line 105) ([loop_invariant @ file Environment.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2))),equals(i_7_After_A,i_7_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2))),equals(i_7_After_B,i_7_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

11589      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(_t_B)(t_A),elem-update(exc_B)(null)),elem-update(heap)(heapAfter_untrustedOutput_0)),elem-update(i_7)(Z(0(#)))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(i_7Before_LOOP)(i_7)),update-application(parallel-upd(elem-update(i_7)(i_7_0),elem-update(heap)(anon(heap,simple_evoting.Environment::$rep(heap)<<origin(assignable @ file Environment.java @ line 106) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(length(_t_B),i_7)<<origin(decreases @ file Environment.java @ line 107) ([])>>),imp(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    boolean b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2,TRUE)),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    boolean exc#48 = false;
    java.lang.Throwable thrownExc#50;
    try {
      {
        if (i_7 < _t_B.length) {
          {
            untrustedOutput(_t_B[i_7]);
          }
          i_7++;
        }
      }
    } catch (java.lang.Throwable e#49) {
      exc#48 = true;
      thrownExc#50 = e#49;
    }
  }
}\> (and(imp(equals(exc#48,TRUE),\<{
  try {
    method-frame (
      source=untrustedOutputMessage(byte[])@simple_evoting.Environment
    ) {
      {
        throw thrownExc#50;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(equals(exc_B,excAtPost_B),equals(heapAtPost_B,heap))))),imp(not(equals(exc#48,TRUE)),and(and(and(and(leq(Z(0(#)),i_7),leq(i_7,length(_t_B)))<<SC>>,not(equals(_t_B,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,simple_evoting.Environment::$rep(heapBefore_LOOP_0)<<origin(assignable @ file Environment.java @ line 106) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(length(_t_B),i_7)<<origin(decreases @ file Environment.java @ line 107) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>)<<origin(loop_invariant @ file Environment.java @ line 105) ([loop_invariant @ file Environment.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2))),equals(i_7_After_A,i_7_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2))),equals(i_7_After_B,i_7_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

11592      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
11783      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key 
11786      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key 
11786      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 194.4ns 
11789      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15216      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.43s 
15317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].Non-interference contract.0 
15321      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
15423      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15566      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key 
15567      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key 
15567      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104ns 
15568      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18811      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.24s 
18882      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].Non-interference contract.0 
18886      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
18990      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
19112      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key 
19113      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key 
19113      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 106ns 
19114      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22358      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.24s 
22432      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].Non-interference contract.0 
22435      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 28ns 
22539      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
22668      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key 
22669      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key 
22669      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.5ns 
22670      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25870      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.2s 
25931      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.1 
25934      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
55588      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55826      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key 
55826      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key 
55827      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 131.8ns 
55828      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58940      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.11s 
59000      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.0 
59003      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
91478      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
91778      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key 
91779      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key 
91779      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.1ns 
91783      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
94913      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.13s 
94971      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].Non-interference contract.0 
94974      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
97190      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
97349      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key 
97349      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key 
97349      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.5ns 
97350      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
100504     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.15s 
100559     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.1 
100561     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
112841     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
113034     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key 
113037     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key 
113037     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.5ns 
113038     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
116140     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.1s 
116210     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.0 
116215     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
129746     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1387703    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting_nomacro 
1387704    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting_fullmacro 
359        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
371        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
411        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.m.key 
570        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.m.key 
593        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 3.08ms 
841        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1756       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1758       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1759       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1760       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3266       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8482       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.64s 
8614       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].Non-interference contract.0 
8685       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 389.6ns 
8744       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9098       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9266       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9268       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9483       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9485       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9549       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9552       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9634       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9635       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9737       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9738       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9806       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9807       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9838       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9839       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9912       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9924       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
10003      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
10016      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
10122      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
10146      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
10150      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
33437      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33634      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.m.key 
33634      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.m.key 
33635      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 293ns 
33638      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36449      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
36501      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].Non-interference contract.0 
36503      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
36504      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
36548      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
36684      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
36897      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.m.key 
36898      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.m.key 
36898      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.6ns 
36899      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39573      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
39620      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].Non-interference contract.0 
39622      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
39623      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
39662      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
39909      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
40098      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.m.key 
40098      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.m.key 
40099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 544.3ns 
40100      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42754      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
42800      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].Non-interference contract.0 
42802      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
42803      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
42841      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
43041      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
43173      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.m.key 
43174      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.m.key 
43174      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 99.8ns 
43175      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45802      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
45858      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].Non-interference contract.0 
45861      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 19.9ns 
45861      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
45897      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
45987      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46116      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).Non-interference contract.0.m.key 
46116      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).Non-interference contract.0.m.key 
46116      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.9ns 
46117      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48759      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
48805      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::secure_voting()].Non-interference contract.0 
48808      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
48808      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
48842      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48930      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48977      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48978      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49072      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49203      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49205      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49451      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49523      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49525      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49543      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49624      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49626      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50257      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50260      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50311      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50313      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50400      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50403      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50450      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50514      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50595      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50595      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50957      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50973      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50975      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50990      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51007      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51009      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51038      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51061      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51062      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51142      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51165      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51167      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51335      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51338      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51397      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51399      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51435      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51437      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51481      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51483      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51511      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51513      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51603      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51606      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51728      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51730      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51831      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51833      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51868      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51936      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51937      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51971      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51972      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52006      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52006      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52027      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52044      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52045      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52498      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52500      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52502      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52505      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52670      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52673      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52747      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52749      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52869      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52871      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52940      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52942      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53037      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53039      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53121      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53123      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53216      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53218      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53277      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53280      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53426      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53428      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53538      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53540      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54352      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54355      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54681      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54683      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54787      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54789      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55085      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55087      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55249      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55251      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55379      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55381      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55555      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55557      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55680      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55682      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55826      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55828      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56836      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1444987    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting_fullmacro 
1444988    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample_fullmacro 
329        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
349        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
381        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.m.key 
538        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.m.key 
556        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.21ms 
783        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1745       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1746       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1747       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1747       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3077       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8247       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.46s 
8406       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].Non-interference contract.0 
8473       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 432.1ns 
8519       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8920       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_SumExample 
10404      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1455791    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample_fullmacro 
1455792    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking_fullmacro 
319        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
323        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
344        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
446        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
469        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.89ms 
669        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1648       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1648       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1656       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1656       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3285       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8805       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 8.14s 
8960       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].Non-interference contract.0 
8991       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 341.2ns 
9018       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9217       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_UserAccount 
12783      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12952      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
12956      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
12956      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 378.4ns 
12959      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16053      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.09s 
16132      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::tryLogin(int,[C)].Non-interference contract.0 
16134      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
16135      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
16192      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_UserAccount 
66277      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66587      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
66587      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
66587      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70ns 
66591      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69430      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
69493      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].Non-interference contract.0 
69495      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
69496      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
69541      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
70046      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70300      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.m.key 
70300      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.m.key 
70300      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107ns 
70302      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73083      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
73147      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].Non-interference contract.0 
73153      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
73154      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
73192      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
73296      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
73443      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.m.key 
73444      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.m.key 
73444      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.8ns 
73445      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
76243      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
76298      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].Non-interference contract.0 
76300      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 22.8ns 
76301      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
76335      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
76435      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76581      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.m.key 
76582      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.m.key 
76582      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 82.1ns 
76584      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
79391      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
79470      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].Non-interference contract.0 
79473      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
79473      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
79514      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_Bank 
80583      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_15_in_UserAccount 
80590      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount_EQ 
80595      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount 
80600      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
80683      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount 
80756      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount_EQ 
80779      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_15_in_UserAccount_EQ 
80790      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_15_in_UserAccount_EQ 
80820      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount_EQ 
80828      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount_EQ 
80847      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_15_in_UserAccount 
80857      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount_EQ 
81365      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
81413      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount 
82010      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount 
82015      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
82563      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount 
224440     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
224756     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
224757     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
224757     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 85ns 
224758     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
227403     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
227459     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].Non-interference contract.0 
227461     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
227462     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
227498     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_UserAccount 
229341     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
229738     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
229738     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
229739     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.7ns 
229739     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
232383     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
232458     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::tryLogin(int,[C)].Non-interference contract.0 
232461     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15ns 
232461     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
232506     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_UserAccount 
244984     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
245235     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
245236     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
245236     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 107.4ns 
245237     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
247875     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
247920     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].Non-interference contract.0 
247922     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.3ns 
247923     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
247954     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
248427     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
248654     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.m.key 
248654     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.m.key 
248654     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.7ns 
248655     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
251313     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
251356     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].Non-interference contract.0 
251359     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.7ns 
251359     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
251390     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
251484     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
251652     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.m.key 
251653     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.m.key 
251653     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 110ns 
251654     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
254308     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
254351     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].Non-interference contract.0 
254353     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.7ns 
254353     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
254383     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
254478     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1710604    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking_fullmacro 
1710605    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts_fullmacro 
380        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
390        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
429        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.m.key 
555        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.m.key 
573        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.1ms 
778        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1746       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1746       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1747       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1747       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2948       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8611       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.83s 
8839       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].Non-interference contract.0 
8937       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 382.9ns 
9003       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9390       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
10427      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10574      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.m.key 
10574      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.m.key 
10575      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 234.1ns 
10576      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13579      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
13639      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].Non-interference contract.0 
13642      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
13643      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
13697      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
14217      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14378      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.m.key 
14378      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.m.key 
14379      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 572.5ns 
14380      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17154      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
17208      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].Non-interference contract.0 
17211      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
17212      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
17261      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
18600      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
18753      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.m.key 
18753      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.m.key 
18753      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 81.1ns 
18754      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21585      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.83s 
21660      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].Non-interference contract.0 
21664      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
21664      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
21716      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
22829      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23025      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.m.key 
23026      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.m.key 
23026      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.7ns 
23027      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25738      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
25796      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].Non-interference contract.0 
25798      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
25799      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
25841      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
27028      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27209      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.m.key 
27209      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.m.key 
27209      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.9ns 
27210      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29901      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
29946      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].Non-interference contract.0 
29948      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
29949      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
29987      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
31382      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
31581      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.m.key 
31581      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.m.key 
31581      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 88.1ns 
31582      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34282      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
34323      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].Non-interference contract.0 
34327      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
34328      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
34368      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
41532      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
41806      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.m.key 
41807      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.m.key 
41807      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.2ns 
41808      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44448      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
44489      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].Non-interference contract.0 
44491      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
44492      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
44527      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
45593      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45879      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.m.key 
45880      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.m.key 
45880      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.8ns 
45881      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48474      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
48523      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].Non-interference contract.0 
48526      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
48527      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
48561      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
49889      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50113      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.m.key 
50114      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.m.key 
50114      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.8ns 
50115      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52725      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
52765      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].Non-interference contract.0 
52767      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
52767      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
52800      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
53227      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53451      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.m.key 
53452      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.m.key 
53452      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.7ns 
53453      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56066      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
56115      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].Non-interference contract.0 
56118      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
56118      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
56151      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
56467      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56653      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.m.key 
56653      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.m.key 
56653      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62ns 
56655      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
59273      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
59326      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].Non-interference contract.0 
59329      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
59330      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
59366      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
59729      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59901      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.m.key 
59901      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.m.key 
59902      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.8ns 
59902      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62506      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
62555      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].Non-interference contract.0 
62557      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
62558      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
62591      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
63134      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
63338      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.m.key 
63338      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.m.key 
63338      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.7ns 
63339      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65911      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
65958      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].Non-interference contract.0 
65960      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
65961      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
65998      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
66415      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66623      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.m.key 
66623      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.m.key 
66624      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65ns 
66624      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69211      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
69252      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].Non-interference contract.0 
69254      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 17.8ns 
69255      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
69286      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
69801      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69990      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.m.key 
69991      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.m.key 
69991      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108ns 
69992      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72574      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
72611      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].Non-interference contract.0 
72614      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
72614      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
72641      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFEfficiencyExamples 
77362      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
77624      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.m.key 
77624      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.m.key 
77624      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63ns 
77625      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
80205      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
80239      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].Non-interference contract.0 
80241      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
80242      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
80268      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFEfficiencyExamples 
81729      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1792741    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts_fullmacro 
1792742    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts_fullmacro 
378        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
394        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
435        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.m.key 
571        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.m.key 
589        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.17ms 
801        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1549       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1550       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1551       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1551       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2837       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8026       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.22s 
8163       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].Non-interference contract.0 
8219       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 576.2ns 
8260       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8630       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9000       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9004       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9252       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
12253      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12389      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.m.key 
12390      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.m.key 
12390      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 267.5ns 
12392      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15398      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.01s 
15454      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].Non-interference contract.0 
15457      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
15458      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
15511      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15574      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15575      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15635      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
16111      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16253      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.m.key 
16253      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.m.key 
16253      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.1ns 
16255      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19092      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
19143      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].Non-interference contract.0 
19146      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
19146      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
19191      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
19469      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19646      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.m.key 
19646      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.m.key 
19646      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.5ns 
19649      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22434      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
22480      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].Non-interference contract.0 
22482      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
22483      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
22524      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
22632      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22765      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.m.key 
22765      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.m.key 
22765      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.7ns 
22766      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25460      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
25506      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].Non-interference contract.0 
25508      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 23.8ns 
25509      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
25549      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25571      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25571      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25585      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25759      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25892      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.m.key 
25892      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.m.key 
25892      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.4ns 
25894      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28669      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
28715      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].Non-interference contract.0 
28717      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
28718      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
28767      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28809      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28810      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28866      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
30327      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30522      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.m.key 
30522      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.m.key 
30522      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
30523      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33180      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
33220      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].Non-interference contract.0 
33223      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
33224      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
33266      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
33318      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
33318      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
33331      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
33448      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33595      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.m.key 
33597      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.m.key 
33597      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 122.1ns 
33598      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36241      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
36304      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].Non-interference contract.0 
36306      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
36307      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
36345      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36387      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36387      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36453      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36453      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36477      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36478      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36500      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36505      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36517      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
37086      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
37301      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.m.key 
37302      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.m.key 
37302      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105.8ns 
37303      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39920      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
39960      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].Non-interference contract.0 
39962      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
39963      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
39998      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
40108      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
40324      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.m.key 
40324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.m.key 
40325      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.3ns 
40330      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42993      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
43032      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].Non-interference contract.0 
43034      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
43035      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
43066      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43157      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43158      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43178      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43179      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43217      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43218      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43236      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43237      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43258      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43262      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43282      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43286      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
43853      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44040      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.m.key 
44040      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.m.key 
44041      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.9ns 
44042      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46633      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
46676      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].Non-interference contract.0 
46678      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.7ns 
46678      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
46708      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46778      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46778      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46820      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46821      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46837      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
46849      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
47155      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47325      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.m.key 
47325      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.m.key 
47325      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.7ns 
47326      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49948      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
50002      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].Non-interference contract.0 
50004      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.9ns 
50005      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
50035      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
50068      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
50068      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
50079      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
50205      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50368      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.m.key 
50369      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.m.key 
50369      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.1ns 
50370      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52971      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
53017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].Non-interference contract.0 
53019      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.3ns 
53020      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
53050      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
53164      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53348      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.m.key 
53348      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.m.key 
53348      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.1ns 
53350      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55943      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
55987      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].Non-interference contract.0 
55989      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
55990      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
56016      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
56076      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56232      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.m.key 
56232      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.m.key 
56232      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57ns 
56233      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58795      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
58830      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].Non-interference contract.0 
58832      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
58832      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
58858      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58882      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58882      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58901      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58901      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58920      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
58922      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
59172      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59336      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.m.key 
59337      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.m.key 
59337      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
59338      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61905      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
61939      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].Non-interference contract.0 
61941      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
61942      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
61969      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
61998      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
61998      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
62008      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
62250      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
62425      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.m.key 
62425      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.m.key 
62425      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.8ns 
62426      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65006      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
65052      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].Non-interference contract.0 
65054      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
65055      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
65082      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
65128      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
65129      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
65144      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
65357      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65552      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.m.key 
65552      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.m.key 
65552      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.8ns 
65554      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68103      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
68136      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].Non-interference contract.0 
68138      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
68139      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
68171      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
68313      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
68487      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.m.key 
68488      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.m.key 
68488      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.3ns 
68490      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71069      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
71107      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].Non-interference contract.0 
71110      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.6ns 
71111      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
71143      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
71218      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
71389      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.m.key 
71389      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.m.key 
71390      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 256.4ns 
71390      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73958      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
73998      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].Non-interference contract.0 
74000      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.9ns 
74001      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
74032      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74048      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74049      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74066      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74067      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74079      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74080      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
74268      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1867368    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts_fullmacro 
1867369    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test InformationFlow_fullmacro 
357        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
375        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
417        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.m.key 
572        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.m.key 
596        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.38ms 
838        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1724       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1724       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1725       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1726       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2902       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8523       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.68s 
8713       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].Non-interference contract.0 
8772       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 438.2ns 
8809       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9152       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
14077      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
14265      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.m.key 
14265      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.m.key 
14265      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.5ns 
14267      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17636      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.37s 
17686      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].Non-interference contract.0 
17688      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
17689      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
17753      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
19011      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19203      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.m.key 
19203      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.m.key 
19203      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 80.1ns 
19208      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22302      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.09s 
22361      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].Non-interference contract.0 
22363      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
22367      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
22429      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
23621      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23780      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.m.key 
23780      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.m.key 
23780      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.7ns 
23781      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26763      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
26807      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].Non-interference contract.0 
26809      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
26809      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
26850      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
27877      WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 386) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 386) ([loop_invariant @ file IFLoopExamples.java @ line 386])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),imp(not(equals(b_1_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_1_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1)))),equals(_x_After_1_A,_x_Before_1_A)),equals(heap_After_LOOP_1_A,heap_Before_LOOP_1_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_1_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))),imp(not(equals(b_1_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_1_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1)))),equals(_x_After_1_B,_x_Before_1_B)),equals(heap_After_LOOP_1_B,heap_Before_LOOP_1_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(b_1_Before_A,b_1_Before_B)),and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

29308      WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 396) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 396) ([loop_invariant @ file IFLoopExamples.java @ line 396])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_2_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(_x_After_2_A,_x_Before_2_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_2_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_2_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(_x_After_2_B,_x_Before_2_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

254091     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
254339     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
254339     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
254339     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.9ns 
254341     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
257315     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
257357     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].Non-interference contract.0 
257359     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
257359     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
257395     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
258334     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 345) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 345) ([loop_invariant @ file IFLoopExamples.java @ line 345])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),imp(not(equals(b_1_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_1_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1)))),equals(_x_After_1_A,_x_Before_1_A)),equals(heap_After_LOOP_1_A,heap_Before_LOOP_1_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_1_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))),imp(not(equals(b_1_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_1_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1)))),equals(_x_After_1_B,_x_Before_1_B)),equals(heap_After_LOOP_1_B,heap_Before_LOOP_1_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

259418     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 355) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 355) ([loop_invariant @ file IFLoopExamples.java @ line 355])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_2_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(_x_After_2_A,_x_Before_2_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_2_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_2_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(_x_After_2_B,_x_Before_2_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

261561     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
261860     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
261860     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
261860     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.8ns 
261861     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
264790     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
264827     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].Non-interference contract.0 
264828     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
264829     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
264860     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
265741     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 304) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 304) ([loop_invariant @ file IFLoopExamples.java @ line 304])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),imp(not(equals(b_1_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_1_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1)))),equals(_x_After_1_A,_x_Before_1_A)),equals(heap_After_LOOP_1_A,heap_Before_LOOP_1_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_1_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))),imp(not(equals(b_1_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_1_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1)))),equals(_x_After_1_B,_x_Before_1_B)),equals(heap_After_LOOP_1_B,heap_Before_LOOP_1_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

266830     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 314) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 314) ([loop_invariant @ file IFLoopExamples.java @ line 314])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_2_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(_x_After_2_A,_x_Before_2_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_2_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_2_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(_x_After_2_B,_x_Before_2_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

268601     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
268861     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.m.key 
268861     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.m.key 
268861     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.8ns 
268863     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
271754     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
271798     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].Non-interference contract.0 
271800     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
271800     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
271835     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
273256     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_3_A<<anonHeapFunction>>),not(equals(self_A_4,null))),equals(boolean::select(heap_Before_LOOP_3_A<<anonHeapFunction>>,self_A_4,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_4),TRUE)),geq(_x_Before_3_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 274) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 274) ([loop_invariant @ file IFLoopExamples.java @ line 274])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_3_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_4),elem-update(_x)(_x_Before_3_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (and(equals(b_3,b_3_Before_A),imp(equals(b_3_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_3_A,self_A_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_A,b_3))),equals(_x_After_3_A,_x)),equals(heap_After_LOOP_3_A,heap))))))),imp(not(equals(b_3_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_3_A,self_A_4),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_3_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_4),elem-update(_x)(_x_Before_3_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_A,b_3)))),equals(_x_After_3_A,_x_Before_3_A)),equals(heap_After_LOOP_3_A,heap_Before_LOOP_3_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_3_B<<anonHeapFunction>>),not(equals(self_B_4,null))),equals(boolean::select(heap_Before_LOOP_3_B<<anonHeapFunction>>,self_B_4,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_4),TRUE)),geq(_x_Before_3_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_3_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_4),elem-update(_x)(_x_Before_3_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (and(equals(b_3,b_3_Before_B),imp(equals(b_3_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_3_B,self_B_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_B,b_3))),equals(_x_After_3_B,_x)),equals(heap_After_LOOP_3_B,heap))))))),imp(not(equals(b_3_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_3_B,self_B_4),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_3_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_4),elem-update(_x)(_x_Before_3_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_B,b_3)))),equals(_x_After_3_B,_x_Before_3_B)),equals(heap_After_LOOP_3_B,heap_Before_LOOP_3_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_3_A<<anonHeapFunction>>,self_A_4,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_3_B<<anonHeapFunction>>,self_B_4,loop.IFLoopExamples::$low)),equals(_x_Before_3_A,_x_Before_3_B)),equals(b_3_Before_A,b_3_Before_B)),and(and(equals(int::select(heap_After_LOOP_3_A,self_After_LOOP_3_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_3_B,self_After_LOOP_3_B,loop.IFLoopExamples::$low)),equals(_x_After_3_A,_x_After_3_B)),equals(b_3_After_A,b_3_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

275288     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
275529     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.m.key 
275529     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.m.key 
275529     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64ns 
275530     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
278482     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
278517     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].Non-interference contract.0 
278519     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.4ns 
278520     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
278550     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
279423     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),not(equals(self_A_2,null))),equals(boolean::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 233) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 233) ([loop_invariant @ file IFLoopExamples.java @ line 233])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),imp(not(equals(b_1_Before_A,TRUE)),and(and(and(equals(self_After_LOOP_1_A,self_A_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1)))),equals(_x_After_1_A,_x_Before_1_A)),equals(heap_After_LOOP_1_A,heap_Before_LOOP_1_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),not(equals(self_B_2,null))),equals(boolean::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),geq(_x_Before_1_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))),imp(not(equals(b_1_Before_B,TRUE)),and(and(and(equals(self_After_LOOP_1_B,self_B_2),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1)))),equals(_x_After_1_B,_x_Before_1_B)),equals(heap_After_LOOP_1_B,heap_Before_LOOP_1_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

280736     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
280955     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.m.key 
280955     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.m.key 
280955     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.5ns 
280956     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
283884     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
283918     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].Non-interference contract.0 
283920     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
283920     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
283949     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
286489     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
286679     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.m.key 
286680     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.m.key 
286680     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.3ns 
286680     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
289581     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.9s 
289615     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].Non-interference contract.0 
289618     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16ns 
289618     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
289648     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
291311     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
291533     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.m.key 
291533     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.m.key 
291533     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
291534     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
294468     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
294506     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].Non-interference contract.0 
294507     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
294508     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
294540     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
296252     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
296440     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.m.key 
296440     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.m.key 
296440     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64ns 
296441     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
299376     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
299412     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].Non-interference contract.0 
299415     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
299418     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
299448     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
301701     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
301930     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.m.key 
301930     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.m.key 
301931     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.6ns 
301931     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
304854     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
304886     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].Non-interference contract.0 
304888     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
304889     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
304918     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
306398     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
306634     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.m.key 
306635     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.m.key 
306635     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.5ns 
306636     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
309481     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
309513     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].Non-interference contract.0 
309515     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.4ns 
309515     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
309560     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
310482     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
310698     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.m.key 
310699     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.m.key 
310699     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.2ns 
310699     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
313569     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
313602     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].Non-interference contract.0 
313604     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 18.6ns 
313605     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
313635     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
314369     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
314553     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.m.key 
314553     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.m.key 
314553     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.3ns 
314554     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
317435     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
317467     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].Non-interference contract.0 
317469     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
317470     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
317572     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
317737     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.m.key 
317737     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.m.key 
317737     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.1ns 
317738     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
320626     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
320658     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].Non-interference contract.0 
320660     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
320660     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
320687     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
321974     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2189724    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test InformationFlow_fullmacro 
2189725    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples_fullmacro 
337        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
341        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
362        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
480        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
498        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.95ms 
744        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1685       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1685       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1689       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1689       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2912       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7885       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.14s 
8120       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
8154       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 347.9ns 
8255       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8645       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_AliasingExamples 
9506       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
9624       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
9625       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
9625       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 261.8ns 
9628       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12601      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
12671      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
12674      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
12675      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
12760      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_AliasingExamples 
13000      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13129      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.m.key 
13129      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.m.key 
13129      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.1ns 
13134      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16020      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
16073      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].Non-interference contract.0 
16076      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
16076      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
16120      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
16243      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16392      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.m.key 
16393      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.m.key 
16393      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.8ns 
16395      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19154      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
19204      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].Non-interference contract.0 
19207      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
19208      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
19249      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
19388      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19524      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.m.key 
19524      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.m.key 
19525      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.31ms 
19526      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22237      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
22287      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].Non-interference contract.0 
22291      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 108.4ns 
22291      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
22349      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
22510      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22671      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.m.key 
22671      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.m.key 
22671      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.7ns 
22672      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25380      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
25422      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].Non-interference contract.0 
25425      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
25425      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
25463      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
25754      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
25893      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.m.key 
25893      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.m.key 
25893      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.9ns 
25894      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28544      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
28588      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].Non-interference contract.0 
28590      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
28591      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
28627      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
28819      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
28976      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.m.key 
28977      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.m.key 
28977      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65ns 
28978      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31655      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
31695      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].Non-interference contract.0 
31697      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
31698      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
31731      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
31833      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
32016      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.m.key 
32016      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.m.key 
32017      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.5ns 
32017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34649      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
34707      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.1 
34710      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
34711      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
34749      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_DifferenceSeqLocset 
35352      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
35509      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.m.key 
35510      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.m.key 
35510      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.8ns 
35511      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38130      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
38174      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.0 
38176      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
38177      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
38210      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_DifferenceSeqLocset 
39650      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
39812      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.m.key 
39813      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.m.key 
39813      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68ns 
39814      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42411      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
42450      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].Non-interference contract.0 
42453      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
42453      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
42485      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
42683      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42868      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.m.key 
42868      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.m.key 
42868      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61ns 
42869      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45488      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
45527      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].Non-interference contract.0 
45529      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.5ns 
45529      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
45562      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
45649      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45812      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.m.key 
45813      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.m.key 
45813      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.1ns 
45813      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48425      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
48462      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].Non-interference contract.0 
48464      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
48465      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
48492      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
48696      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48884      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.m.key 
48884      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.m.key 
48884      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.7ns 
48886      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51486      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
51521      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].Non-interference contract.0 
51523      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.7ns 
51523      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
51549      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
51764      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
51930      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.m.key 
51931      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.m.key 
51931      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.8ns 
51932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54509      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
54544      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].Non-interference contract.0 
54546      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.6ns 
54546      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
54573      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
54625      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54841      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.m.key 
54842      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.m.key 
54842      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.1ns 
54843      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57496      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
57542      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].Non-interference contract.0 
57544      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
57545      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
57576      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
57703      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57871      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.m.key 
57871      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.m.key 
57871      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 237.4ns 
57872      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60410      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
60444      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].Non-interference contract.0 
60446      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
60447      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
60473      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
60559      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
60731      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.m.key 
60731      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.m.key 
60731      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 110ns 
60732      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63290      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
63324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].Non-interference contract.0 
63326      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.1ns 
63326      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
63376      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
63446      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63609      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.m.key 
63609      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.m.key 
63609      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.9ns 
63610      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66153      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
66188      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].Non-interference contract.0 
66190      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
66191      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
66218      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
66283      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66477      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.m.key 
66477      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.m.key 
66478      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.4ns 
66478      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69063      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
69108      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].Non-interference contract.0 
69110      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
69110      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
69139      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
69199      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69418      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.m.key 
69418      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.m.key 
69418      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
69419      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71988      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
72022      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].Non-interference contract.0 
72024      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
72025      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
72051      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
72157      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
72328      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.m.key 
72328      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.m.key 
72328      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.9ns 
72329      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
74895      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
74929      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].Non-interference contract.0 
74931      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.3ns 
74931      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
74958      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
75037      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
75226      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.m.key 
75227      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.m.key 
75227      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 96.7ns 
75228      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77781      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
77815      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].Non-interference contract.0 
77817      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
77817      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
77844      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
78064      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
78252      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.m.key 
78252      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.m.key 
78252      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59ns 
78253      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
80813      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
80847      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].Non-interference contract.0 
80849      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
80850      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
80876      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
81077      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
81262      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.m.key 
81262      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.m.key 
81262      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.9ns 
81263      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
83807      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
83840      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].Non-interference contract.0 
83842      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
83843      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
83880      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
83959      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
84146      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.m.key 
84146      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.m.key 
84146      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.5ns 
84147      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
86711      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
86744      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].Non-interference contract.0 
86746      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 28.6ns 
86746      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
86772      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
86967      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
87160      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.m.key 
87160      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.m.key 
87160      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 82.9ns 
87161      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
89698      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
89733      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.1 
89735      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.1ns 
89736      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
89763      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
89894      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
90104      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.m.key 
90104      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.m.key 
90104      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 51.5ns 
90105      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
92656      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
92690      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.0 
92692      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
92692      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
92719      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
92851      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
93091      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.m.key 
93092      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.m.key 
93092      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 52.4ns 
93093      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
95609      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
95642      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].Non-interference contract.0 
95644      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16ns 
95644      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
95670      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
95874      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
96075      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.m.key 
96075      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.m.key 
96075      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 48.9ns 
96076      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
98605      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
98647      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].Non-interference contract.0 
98650      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
98650      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
98677      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
98763      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
2288889    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples_fullmacro 
2288890    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects_fullmacro 
366        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
383        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
412        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.m.key 
524        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.m.key 
560        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.13ms 
812        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1744       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1744       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1745       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1745       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3073       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5920       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8371       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.56s 
8506       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].Non-interference contract.0 
8570       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 356.4ns 
8599       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8884       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee3 
9463       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9574       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.m.key 
9574       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.m.key 
9575       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 258ns 
9578       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10582      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12532      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
12604      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].Non-interference contract.0 
12608      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
12609      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
13052      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
13053      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
13134      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
13651      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13808      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.m.key 
13808      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.m.key 
13808      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.1ns 
13809      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14709      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
16650      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
16702      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.1 
16705      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
16706      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
16924      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
16925      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
16957      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
17253      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17426      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.m.key 
17426      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.m.key 
17426      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.5ns 
17428      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18311      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
20156      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
20206      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.0 
20209      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
20209      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
20398      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
20399      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
20429      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
20679      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20839      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.m.key 
20840      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.m.key 
20840      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62ns 
20841      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21721      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
23582      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
23639      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].Non-interference contract.0 
23641      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 24.8ns 
23642      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
23681      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
23771      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23907      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).Non-interference contract.0.m.key 
23908      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).Non-interference contract.0.m.key 
23908      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
23909      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24762      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
26618      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
26671      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.Naumann[object.Naumann::Pair_m(int,int)].Non-interference contract.0 
26673      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
26674      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
37624      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
37843      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.m.key 
37844      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.m.key 
37844      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.4ns 
37845      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38668      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
40542      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
40589      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].Non-interference contract.0 
40591      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
40592      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
40638      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
46314      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46557      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.m.key 
46558      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.m.key 
46558      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
46559      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47389      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
49206      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
49249      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].Non-interference contract.0 
49251      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
49252      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
49285      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
49317      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
49339      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
49380      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
49718      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49875      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.m.key 
49876      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.m.key 
49876      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
49876      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50745      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
52554      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
52594      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.1 
52597      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
52597      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
52628      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
81148      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
81380      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.0.m.key 
81380      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.0.m.key 
81380      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.2ns 
81381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
82183      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
84000      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
84041      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.0 
84043      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
84043      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
84074      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
95937      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
96232      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).Non-interference contract.0.m.key 
96233      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).Non-interference contract.0.m.key 
96233      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 99.6ns 
96234      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
97051      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
98836      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
98879      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_if_two_object_creation()].Non-interference contract.0 
98882      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
98883      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
98923      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
110593     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
110841     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.m.key 
110841     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.m.key 
110841     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.8ns 
110842     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
111651     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
113434     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
113483     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].Non-interference contract.0 
113486     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
113486     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
113517     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
141088     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
141342     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.m.key 
141343     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.m.key 
141343     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.4ns 
141344     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
142151     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
143944     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
143981     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].Non-interference contract.0 
143983     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
143983     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
144011     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
153379     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
153647     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.m.key 
153647     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.m.key 
153648     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60ns 
153648     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
154443     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
156214     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
156251     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.1 
156252     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
156253     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
156280     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
164304     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
164501     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.m.key 
164502     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.m.key 
164502     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66ns 
164503     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
165313     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
167100     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
167136     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.0 
167139     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 17.1ns 
167139     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
167167     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
167371     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
167562     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.m.key 
167562     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.m.key 
167562     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 72ns 
167563     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
168373     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
170151     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
170188     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].Non-interference contract.0 
170190     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
170191     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
170218     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
170588     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
170777     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.m.key 
170777     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.m.key 
170777     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.6ns 
170778     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
171580     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
173366     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
173405     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].Non-interference contract.0 
173407     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
173408     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
173436     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
173701     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
173875     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.m.key 
173875     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.m.key 
173875     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.6ns 
173876     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
174675     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
176442     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
176486     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].Non-interference contract.0 
176488     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
176488     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
176515     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
176836     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
177025     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.m.key 
177025     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.m.key 
177025     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.9ns 
177026     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
177826     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
179613     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
179659     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].Non-interference contract.0 
179661     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
179661     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
179752     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
179935     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.m.key 
179935     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.m.key 
179935     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.9ns 
179936     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
180732     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
182499     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
182549     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].Non-interference contract.0 
182552     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.5ns 
182553     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
182584     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee2 
183980     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2473291    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects_fullmacro 
2473292    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting_fullmacro 
341        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
346        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
386        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.m.key 
520        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.m.key 
545        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.02ms 
755        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1602       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1606       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1607       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1609       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2895       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8905       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 8.15s 
9099       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].Non-interference contract.0 
9162       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 335.7ns 
9191       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9767       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
9971       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
10833      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
11298      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
12349      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
14233      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14413      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).Non-interference contract.0.m.key 
14414      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).Non-interference contract.0.m.key 
14414      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 255.7ns 
14418      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18007      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.59s 
18081      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage()].Non-interference contract.0 
18084      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
18084      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
18149      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
18339      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
20709      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20875      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.m.key 
20876      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.m.key 
20876      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103ns 
20877      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24254      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.38s 
24342      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].Non-interference contract.0 
24345      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
24346      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
24440      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24601      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.m.key 
24601      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.m.key 
24601      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.5ns 
24603      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28006      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.4s 
28078      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].Non-interference contract.0 
28080      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
28081      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
28178      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
28316      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.m.key 
28318      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.m.key 
28319      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.61ms 
28320      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31627      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.31s 
31687      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].Non-interference contract.0 
31690      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
31690      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
31769      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
31916      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.m.key 
31917      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.m.key 
31917      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.2ns 
31918      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35194      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.28s 
35253      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.1 
35255      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
35256      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
35306      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
35313      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
35351      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
35623      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
35702      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
35732      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
35766      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36790      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36876      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36903      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37027      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37095      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37120      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37208      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37233      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37281      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37529      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37604      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37629      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37682      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37702      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37762      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37831      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37856      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37960      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38022      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38045      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38121      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38147      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38175      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38198      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38236      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38261      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38287      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38324      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38391      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38456      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38534      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38644      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38676      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38725      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38799      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38824      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38855      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38882      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40039      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
40074      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40118      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40155      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40195      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40235      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40275      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40314      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40351      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40386      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40463      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40758      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
40845      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
40922      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41003      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41067      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41128      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41204      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41263      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41340      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41401      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
56048      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
56110      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
56180      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
56218      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
74941      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
75247      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.m.key 
75248      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.m.key 
75248      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.3ns 
75249      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
78542      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.29s 
78600      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.0 
78602      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
78603      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
78655      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
78662      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
78701      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
78939      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
79014      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
79074      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
79084      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80044      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80222      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80279      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80304      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80367      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80429      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80451      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80493      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80512      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80536      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80593      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
80610      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80665      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80704      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80756      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81058      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81082      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81101      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81125      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81155      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81196      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81241      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81267      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81300      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81381      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81414      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81491      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81553      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81579      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81637      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81712      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81746      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81810      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
81853      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81887      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81921      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
81954      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
82004      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
83111      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
83155      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83196      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83236      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83271      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83307      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83347      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83382      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83422      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83461      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83496      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83797      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
83882      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
83956      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84023      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84097      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84170      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84244      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84304      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84366      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84426      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
100648     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
100731     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
100769     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
100815     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
100878     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
100923     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
124167     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
124492     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).Non-interference contract.0.m.key 
124493     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).Non-interference contract.0.m.key 
124493     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58ns 
124494     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
127691     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.2s 
127746     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMTEnv[simple_evoting.SMTEnv::send(int,int,int,simple_evoting.Server,int)].Non-interference contract.0 
127748     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
127748     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
127795     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
127809     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
127822     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
127836     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
127850     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
127899     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
129105     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
129382     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.m.key 
129383     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.m.key 
129383     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.4ns 
129384     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
132592     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.21s 
132646     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].Non-interference contract.0 
132648     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
132649     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
132696     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
132715     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
132729     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
133685     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
133874     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.m.key 
133874     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.m.key 
133874     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.4ns 
133875     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
137129     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.25s 
137181     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.1 
137183     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15ns 
137184     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
137221     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Voter 
137226     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
137802     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
137857     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
137981     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
138034     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
140399     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140406     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140427     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140441     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140461     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140468     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140481     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140502     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140509     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140523     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140529     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140543     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140556     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
140900     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
141017     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
141195     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
141249     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
141270     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
141282     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
141579     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
141698     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
141848     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
141972     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
142261     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
142377     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
142682     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
142841     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
143134     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
143259     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
143531     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
143785     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144057     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144154     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144241     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144355     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144459     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144565     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
144878     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
145191     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
145297     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
145569     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
145897     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
146210     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
146353     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
146464     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
148142     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
148330     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
149121     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
149236     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
154561     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
154814     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.m.key 
154814     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.m.key 
154814     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.2ns 
154815     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
157997     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.18s 
158058     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.0 
158060     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.8ns 
158061     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
158097     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Voter 
158101     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
158632     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
158772     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
158821     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
158866     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
161209     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161216     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161273     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161280     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161293     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161300     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161313     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161327     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161334     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161341     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161354     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161361     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161406     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161420     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
161446     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161586     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161654     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161766     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161873     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161981     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
162373     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
162668     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
162779     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
162893     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
163253     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
163375     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
163643     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
163848     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
163956     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
164196     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
164312     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
164484     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
164597     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
164709     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
165010     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
165344     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
165446     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
165548     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
165845     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
166108     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
166212     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
166465     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
166649     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
166914     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
168787     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
169004     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
169809     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
169867     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
177689     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2651485    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting_fullmacro 

Standard error

Exception in thread "Thread-5" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([loop_invariant @ file IFBlockExamples.java @ line 255])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([loop_invariant @ file IFBlockExamples.java @ line 255])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-7" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([loop_invariant @ file IFBlockExamples.java @ line 231])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([loop_invariant @ file IFBlockExamples.java @ line 231])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(l1_1_After_A,l1_1_Before_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(l1_1_After_B,l1_1_Before_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-9" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([loop_invariant @ file IFBlockExamples.java @ line 212])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(l1_1_After_0_A,l1_1_Before_0_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(l1_1_After_0_B,l1_1_Before_0_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>)<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([loop_invariant @ file IFBlockExamples.java @ line 212])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_l_B)(_l_B_Before_A))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2)))),equals(l1_1_After_0_A,l1_1_Before_0_A)),equals(_l_B_After_A,_l_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),geq(_l_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B)))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_l_B)(_l_B_Before_B))),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2)))),equals(l1_1_After_0_B,l1_1_Before_0_B)),equals(_l_B_After_B,_l_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-1" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([loop_invariant @ file IFLoopExamples.java @ line 458])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([loop_invariant @ file IFLoopExamples.java @ line 458])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-3" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([loop_invariant @ file IFLoopExamples.java @ line 438])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([loop_invariant @ file IFLoopExamples.java @ line 438])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-5" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([loop_invariant @ file IFLoopExamples.java @ line 418])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([loop_invariant @ file IFLoopExamples.java @ line 418])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),leq(Z(0(#)),_x_B_Before_B)),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-7" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([loop_invariant @ file IFLoopExamples.java @ line 376])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([loop_invariant @ file IFLoopExamples.java @ line 376])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-9" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([loop_invariant @ file IFLoopExamples.java @ line 335])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([loop_invariant @ file IFLoopExamples.java @ line 335])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-11" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([loop_invariant @ file IFLoopExamples.java @ line 294])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([loop_invariant @ file IFLoopExamples.java @ line 294])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-13" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([loop_invariant @ file IFLoopExamples.java @ line 253])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([loop_invariant @ file IFLoopExamples.java @ line 253])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-15" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([loop_invariant @ file IFLoopExamples.java @ line 223])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([loop_invariant @ file IFLoopExamples.java @ line 223])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-17" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([loop_invariant @ file IFLoopExamples.java @ line 204])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([loop_invariant @ file IFLoopExamples.java @ line 204])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-19" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),not(equals(self_A_A,null))),equals(boolean::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([loop_invariant @ file IFLoopExamples.java @ line 185])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),imp(not(equals(b_Before_A,TRUE)),and(and(and(equals(self_A_After_LOOP_A,self_A_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b)))),equals(_x_A_After_A,_x_A_Before_A)),equals(heap_After_LOOP_A,heap_Before_LOOP_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),not(equals(self_A_B,null))),equals(boolean::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),geq(_x_A_Before_B,Z(1(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))),imp(not(equals(b_Before_B,TRUE)),and(and(and(equals(self_A_After_LOOP_B,self_A_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b)))),equals(_x_A_After_B,_x_A_Before_B)),equals(heap_After_LOOP_B,heap_Before_LOOP_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),not(equals(self_A_A,null))),equals(boolean::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([loop_invariant @ file IFLoopExamples.java @ line 185])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),imp(not(equals(b_Before_A,TRUE)),and(and(and(equals(self_A_After_LOOP_A,self_A_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b)))),equals(_x_A_After_A,_x_A_Before_A)),equals(heap_After_LOOP_A,heap_Before_LOOP_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),not(equals(self_A_B,null))),equals(boolean::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),geq(_x_A_Before_B,Z(1(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))),imp(not(equals(b_Before_B,TRUE)),and(and(and(equals(self_A_After_LOOP_B,self_A_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B))),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b)))),equals(_x_A_After_B,_x_A_Before_B)),equals(heap_After_LOOP_B,heap_Before_LOOP_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-21" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([loop_invariant @ file IFLoopExamples.java @ line 165])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([loop_invariant @ file IFLoopExamples.java @ line 165])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-23" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([loop_invariant @ file IFLoopExamples.java @ line 135])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([loop_invariant @ file IFLoopExamples.java @ line 135])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-25" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([loop_invariant @ file IFLoopExamples.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),not(equals(self_B_A_0,null))),equals(boolean::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([loop_invariant @ file IFLoopExamples.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),imp(not(equals(b_5_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5)))),equals(_x_B_After_0_A,_x_B_Before_0_A)),equals(heap_After_LOOP_2_A,heap_Before_LOOP_2_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),not(equals(self_B_B_0,null))),equals(boolean::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))),imp(not(equals(b_5_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B))),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5)))),equals(_x_B_After_0_B,_x_B_Before_0_B)),equals(heap_After_LOOP_2_B,heap_Before_LOOP_2_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-27" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([loop_invariant @ file IFLoopExamples.java @ line 74])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(z_1_After_A,z_1_Before_A)),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(z_1_After_B,z_1_Before_B)),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([loop_invariant @ file IFLoopExamples.java @ line 74])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(z_1_After_A,z_1_Before_A)),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B)))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(z_1_After_B,z_1_Before_B)),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-29" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([loop_invariant @ file IFLoopExamples.java @ line 54])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([loop_invariant @ file IFLoopExamples.java @ line 54])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0)))),equals(_x_B_After_A,_x_B_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),geq(_x_B_Before_B,Z(0(#)))),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B))),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0)))),equals(_x_B_After_B,_x_B_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-33" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([loop_invariant @ file IFLoopExamples.java @ line 22])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(y_1)(y_1_Before_A))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0)))),equals(y_1_After_A,y_1_Before_A)),equals(x_1_After_A,x_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(y_1)(y_1_Before_B))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0)))),equals(y_1_After_B,y_1_Before_B)),equals(x_1_After_B,x_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>)<<origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([loop_invariant @ file IFLoopExamples.java @ line 22])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),elem-update(y_1)(y_1_Before_A))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0)))),equals(y_1_After_A,y_1_Before_A)),equals(x_1_After_A,x_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B)))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),elem-update(y_1)(y_1_Before_B))),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0)))),equals(y_1_After_B,y_1_Before_B)),equals(x_1_After_B,x_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-11" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC, origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>)<<origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0)))),equals(i_1_After_A,i_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0)))),equals(i_1_After_B,i_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(not(equals(b_0_Before_A,TRUE)),not(equals(b_0_Before_B,TRUE))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),not(equals(self_B_A,null))),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC, origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>)<<origin(<none> (implicit)) ([loop_invariant @ file ObjectOrientation.java @ line 109, loop_invariant @ file ObjectOrientation.java @ line 110])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_0_Before_A,TRUE)),and(and(and(equals(self_B_After_LOOP_A,self_B_A),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0)))),equals(i_1_After_A,i_1_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),not(equals(self_B_B,null))),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_0_Before_B,TRUE)),and(and(and(equals(self_B_After_LOOP_B,self_B_B),update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B)))),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0)))),equals(i_1_After_B,i_1_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(not(equals(b_0_Before_A,TRUE)),not(equals(b_0_Before_B,TRUE))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-1" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>)<<origin(loop_invariant @ file Environment.java @ line 105) ([loop_invariant @ file Environment.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2))),equals(i_7_After_A,i_7_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2))),equals(i_7_After_B,i_7_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>)<<origin(loop_invariant @ file Environment.java @ line 105) ([loop_invariant @ file Environment.java @ line 105])>>,and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),imp(not(equals(b_2_Before_A,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2))),equals(i_7_After_A,i_7_Before_A)),equals(heap_After_LOOP_0_A,heap_Before_LOOP_0_A<<anonHeapFunction>>))))),and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))),imp(not(equals(b_2_Before_B,TRUE)),and(and(update-application(parallel-upd(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B))),\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2))),equals(i_7_After_B,i_7_Before_B)),equals(heap_After_LOOP_0_B,heap_Before_LOOP_0_B<<anonHeapFunction>>))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more