RunAllProofsInfFlow

29

tests

4

failures

0

ignored

44m31.05s

duration

86%

successful

Failed tests

BlockContracts_nomacro

org.opentest4j.AssertionFailedError: group BlockContracts_nomacro:
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

LoopInvariants_nomacro

org.opentest4j.AssertionFailedError: group LoopInvariants_nomacro:
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

NewObjects_nomacro

org.opentest4j.AssertionFailedError: group NewObjects_nomacro:
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

SimpleEvoting_nomacro

org.opentest4j.AssertionFailedError: group SimpleEvoting_nomacro:
FAIL: Verifying property "provable" failed for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key
pass: Verifying property "notprovable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key
pass: Verifying property "provable" was successful for file: /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key
 ==> expected: <true> but was: <false>
	at app//org.junit.jupiter.api.AssertionFailureBuilder.build(AssertionFailureBuilder.java:151)
	at app//org.junit.jupiter.api.AssertionFailureBuilder.buildAndThrow(AssertionFailureBuilder.java:132)
	at app//org.junit.jupiter.api.AssertTrue.failNotTrue(AssertTrue.java:63)
	at app//org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:36)
	at app//org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:211)
	at app//de.uka.ilkd.key.proof.runallproofs.RunAllProofsTest.lambda$data$0(RunAllProofsTest.java:78)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$0(DynamicTestTestDescriptor.java:53)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:167)
	at app//org.junit.jupiter.api.extension.InvocationInterceptor.interceptDynamicTest(InvocationInterceptor.java:184)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.lambda$execute$1(DynamicTestTestDescriptor.java:61)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptorCall.lambda$ofVoid$0(InvocationInterceptorChain.java:78)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45)
	at app//org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:60)
	at app//org.junit.jupiter.engine.descriptor.DynamicTestTestDescriptor.execute(DynamicTestTestDescriptor.java:32)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:226)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask$DefaultDynamicTestExecutor.execute(NodeTestTask.java:204)
	at java.base@11.0.18/java.util.Optional.ifPresent(Optional.java:183)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.lambda$invokeTestMethod$1(TestFactoryTestDescriptor.java:108)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.jupiter.engine.descriptor.TestFactoryTestDescriptor.invokeTestMethod(TestFactoryTestDescriptor.java:95)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:138)
	at app//org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:68)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:151)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at java.base@11.0.18/java.util.ArrayList.forEach(ArrayList.java:1541)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.invokeAll(SameThreadHierarchicalTestExecutorService.java:41)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:155)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:141)
	at app//org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:139)
	at app//org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:138)
	at app//org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:95)
	at app//org.junit.platform.engine.support.hierarchical.SameThreadHierarchicalTestExecutorService.submit(SameThreadHierarchicalTestExecutorService.java:35)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestExecutor.execute(HierarchicalTestExecutor.java:57)
	at app//org.junit.platform.engine.support.hierarchical.HierarchicalTestEngine.execute(HierarchicalTestEngine.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:107)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:88)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.lambda$execute$0(EngineExecutionOrchestrator.java:54)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.withInterceptedStreams(EngineExecutionOrchestrator.java:67)
	at app//org.junit.platform.launcher.core.EngineExecutionOrchestrator.execute(EngineExecutionOrchestrator.java:52)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:114)
	at app//org.junit.platform.launcher.core.DefaultLauncher.execute(DefaultLauncher.java:86)
	at app//org.junit.platform.launcher.core.DefaultLauncherSession$DelegatingLauncher.execute(DefaultLauncherSession.java:86)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.processAllTestClasses(JUnitPlatformTestClassProcessor.java:110)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor$CollectAllTestClassesExecutor.access$000(JUnitPlatformTestClassProcessor.java:90)
	at org.gradle.api.internal.tasks.testing.junitplatform.JUnitPlatformTestClassProcessor.stop(JUnitPlatformTestClassProcessor.java:85)
	at org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.stop(SuiteTestClassProcessor.java:62)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base@11.0.18/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base@11.0.18/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base@11.0.18/java.lang.reflect.Method.invoke(Method.java:566)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36)
	at org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24)
	at org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33)
	at org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94)
	at com.sun.proxy.$Proxy2.stop(Unknown Source)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker$3.run(TestWorker.java:193)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.executeAndMaintainThreadName(TestWorker.java:129)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:100)
	at org.gradle.api.internal.tasks.testing.worker.TestWorker.execute(TestWorker.java:60)
	at org.gradle.process.internal.worker.child.ActionExecutionWorker.execute(ActionExecutionWorker.java:56)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:113)
	at org.gradle.process.internal.worker.child.SystemApplicationClassLoaderWorker.call(SystemApplicationClassLoaderWorker.java:65)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.run(GradleWorkerMain.java:69)
	at app//worker.org.gradle.process.internal.worker.GradleWorkerMain.main(GradleWorkerMain.java:74)

Tests

Test Method name Duration Result
SimpleEvoting data()[10] 2m37.75s passed
ToyVoting_nomacro data()[11] 36.362s passed
ConditionalConfidential_nomacro data()[12] 0.001s passed
SumExample_nomacro data()[13] 11.363s passed
ToyBanking_nomacro data()[14] 1m16.22s passed
BlockContracts_nomacro data()[15] 1m16.62s failed
MethodContracts_nomacro data()[16] 1m12.96s passed
LoopInvariants_nomacro data()[17] 1m9.50s failed
MiniExamples_nomacro data()[18] 1m36.50s passed
NewObjects_nomacro data()[19] 2m5.06s failed
ToyVoting data()[1] 24.698s passed
SimpleEvoting_nomacro data()[20] 2m53.88s failed
ToyVoting_fullmacro data()[21] 57.946s passed
SumExample_fullmacro data()[22] 10.884s passed
ToyBanking_fullmacro data()[23] 4m16.34s passed
BlockContracts_fullmacro data()[24] 1m20.98s passed
MethodContracts_fullmacro data()[25] 1m12.51s passed
InformationFlow_fullmacro data()[26] 5m14.02s passed
MiniExamples_fullmacro data()[27] 1m33.87s passed
NewObjects_fullmacro data()[28] 3m9.83s passed
SimpleEvoting_fullmacro data()[29] 3m7.17s passed
ConditionalConfidential data()[2] 13.355s passed
SumExample data()[3] 9.103s passed
ToyBanking data()[4] 1m45.55s passed
BlockContracts data()[5] 56.894s passed
MethodContracts data()[6] 1m9.89s passed
LoopInvariants data()[7] 1m4.02s passed
MiniExamples data()[8] 1m28.25s passed
NewObjects data()[9] 1m19.54s passed

Standard output

515        INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting 
366        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
379        WARN  main            d.u.i.k.s.ProofSettings   No proof-settings could be loaded, using defaults java.io.FileNotFoundException: /home/runner/.key/proof-settings.props (No such file or directory)
	at java.base/java.io.FileInputStream.open0(Native Method)

417        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).JML normal_behavior operation contract.0.key 
550        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).JML normal_behavior operation contract.0.key 
567        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 4.82ms 
800        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1692       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1695       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1700       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1700       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2988       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7877       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.08s 
8007       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].JML normal_behavior operation contract.0 
8075       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 360.6ns 
9014       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9135       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).JML normal_behavior operation contract.0.key 
9136       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).JML normal_behavior operation contract.0.key 
9136       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.3ns 
9139       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
11960      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
12033      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].JML normal_behavior operation contract.0 
12037      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 24.5ns 
12140      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12263      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).JML normal_behavior operation contract.0.key 
12264      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).JML normal_behavior operation contract.0.key 
12264      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 85.9ns 
12266      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14989      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
15046      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].JML normal_behavior operation contract.0 
15050      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
15152      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15259      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).JML normal_behavior operation contract.0.key 
15260      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).JML normal_behavior operation contract.0.key 
15260      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.2ns 
15261      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17829      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
17878      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].JML normal_behavior operation contract.0 
17883      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
17985      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18095      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).JML normal_behavior operation contract.0.key 
18096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).JML normal_behavior operation contract.0.key 
18096      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.2ns 
18097      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20660      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
20707      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].JML normal_behavior operation contract.0 
20711      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
20816      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20931      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).JML normal_behavior operation contract.0.key 
20932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).JML normal_behavior operation contract.0.key 
20932      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.3ns 
20934      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23461      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
23511      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::secure_voting()].JML normal_behavior operation contract.0 
23515      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
24319      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25207      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting 
25212      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ConditionalConfidential 
338        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
346        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
387        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__hasAccessRight(CCExample.User)).JML normal_behavior operation contract.0.key 
538        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__hasAccessRight(CCExample.User)).JML normal_behavior operation contract.0.key 
555        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.76ms 
769        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1614       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1614       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1615       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1615       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2933       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5365       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
7656       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 6.89s 
7774       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof ConditionalConfidentialExample[ConditionalConfidentialExample::hasAccessRight(ConditionalConfidentialExample.User)].JML normal_behavior operation contract.0 
7803       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 540.49ns 
9734       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9899       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__getConfidentialData(CCExample.User)).JML normal_behavior operation contract.0.key 
9899       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ConditionalConfidential/CCExample(CCExample__getConfidentialData(CCExample.User)).JML normal_behavior operation contract.0.key 
9899       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.7ns 
9901       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10779      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12495      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
12558      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof ConditionalConfidentialExample[ConditionalConfidentialExample::getConfidentialData(ConditionalConfidentialExample.User)].JML normal_behavior operation contract.0 
12562      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.2ns 
13066      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38566      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ConditionalConfidential 
38567      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample 
301        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
314        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
343        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).JML normal_behavior operation contract.0.key 
499        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).JML normal_behavior operation contract.0.key 
520        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.75ms 
725        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1581       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1582       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1584       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1584       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2892       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7373       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 6.65s 
7551       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].JML normal_behavior operation contract.0 
7583       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 282.2ns 
8826       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47669      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample 
47670      INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking 
316        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
323        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
353        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
449        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
472        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 3.05ms 
680        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1619       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1620       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1624       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1624       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2808       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7813       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.13s 
7971       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].JML normal_behavior operation contract.0 
8003       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 234.9ns 
9442       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9576       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
9576       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
9576       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.7ns 
9580       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12616      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
12693      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::tryLogin(int,[C)].JML normal_behavior operation contract.0 
12711      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
33254      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33463      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
33463      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
33464      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 80.8ns 
33467      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36267      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
36340      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[java.lang.Object::<inv>()].JML accessible clause.0 
36343      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
39819      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
40011      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
40012      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
40012      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 74.9ns 
40013      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42815      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
42870      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].JML normal_behavior operation contract.0 
42874      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.5ns 
43177      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
43323      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
43324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
43324      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 110.1ns 
43325      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
46149      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].JML normal_behavior operation contract.0 
46152      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
46256      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46377      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).JML normal_behavior operation contract.0.key 
46377      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).JML normal_behavior operation contract.0.key 
46377      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 119.4ns 
46378      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49139      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
49189      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].JML normal_behavior operation contract.0 
49192      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 9.1ns 
49294      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49421      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
49422      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
49422      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.1ns 
49423      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52169      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
52232      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].JML normal_behavior operation contract.0 
52236      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
58475      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58656      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
58657      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).JML normal_behavior operation contract.0.key 
58657      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.9ns 
58658      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61286      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
61336      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].JML normal_behavior operation contract.0 
61339      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
61745      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61891      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
61892      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).JML normal_behavior operation contract.0.key 
61892      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.3ns 
61893      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64564      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
64623      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::tryLogin(int,[C)].JML normal_behavior operation contract.0 
64627      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
83913      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
84161      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
84161      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(java.lang.Object___inv_()).JML accessible clause.0.key 
84161      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.8ns 
84162      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
86725      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
86772      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[java.lang.Object::<inv>()].JML accessible clause.0 
86774      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.2ns 
91014      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
91198      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
91198      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).JML normal_behavior operation contract.0.key 
91199      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 714.59ns 
91200      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
93792      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
93841      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].JML normal_behavior operation contract.0 
93843      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
94046      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
94209      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
94209      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).JML normal_behavior operation contract.0.key 
94210      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 790.89ns 
94211      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
96807      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
96871      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].JML normal_behavior operation contract.0 
96877      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
96979      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
97116      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).JML normal_behavior operation contract.0.key 
97117      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).JML normal_behavior operation contract.0.key 
97117      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.9ns 
97118      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
99682      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
99723      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].JML normal_behavior operation contract.0 
99726      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
99828      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
99966      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.Bank(banking_example2.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
99966      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.Bank(banking_example2.Bank__login(int,(C)).JML normal_behavior operation contract.0.key 
99966      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105ns 
99968      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
102553     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
102594     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.Bank[banking_example2.Bank::login(int,[C)].JML normal_behavior operation contract.0 
102597     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
105206     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
153220     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking 
153222     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts 
351        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
351        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
382        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).JML operation contract.0.key 
476        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).JML operation contract.0.key 
499        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.65ms 
700        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1550       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1552       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1555       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1556       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3009       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7582       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 6.88s 
7713       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].JML operation contract.0 
7771       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 343.5ns 
8490       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
8594       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).JML operation contract.0.key 
8595       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).JML operation contract.0.key 
8596       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 486.99ns 
8597       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
11339      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
11424      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].JML operation contract.0 
11428      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 38.7ns 
11632      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
11743      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).JML operation contract.0.key 
11744      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).JML operation contract.0.key 
11744      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 72.1ns 
11745      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14324      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
14382      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].JML operation contract.0 
14385      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
14689      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14817      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).JML operation contract.0.key 
14817      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).JML operation contract.0.key 
14817      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 88.5ns 
14818      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17408      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
17461      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].JML operation contract.0 
17464      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
17868      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18034      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).JML operation contract.0.key 
18034      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).JML operation contract.0.key 
18035      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.9ns 
18037      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20657      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
20702      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].JML operation contract.0 
20705      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
21008      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21148      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).JML operation contract.0.key 
21148      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).JML operation contract.0.key 
21148      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.4ns 
21151      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23642      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
23696      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].JML operation contract.0 
23699      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
24102      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24249      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).JML operation contract.0.key 
24250      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).JML operation contract.0.key 
24250      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 106.9ns 
24251      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26727      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
26772      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].JML operation contract.0 
26775      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
27180      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27327      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).JML operation contract.0.key 
27327      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).JML operation contract.0.key 
27327      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63ns 
27328      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29786      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
29829      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].JML operation contract.0 
29832      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
30236      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30418      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).JML operation contract.0.key 
30418      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).JML operation contract.0.key 
30418      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
30419      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32844      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
32898      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].JML operation contract.0 
32909      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
33212      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33421      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).JML operation contract.0.key 
33422      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).JML operation contract.0.key 
33422      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 460.3ns 
33423      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35878      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
35940      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].JML operation contract.0 
35946      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
36149      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
36350      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).JML operation contract.0.key 
36350      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).JML operation contract.0.key 
36351      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.5ns 
36351      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38788      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
38830      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].JML operation contract.0 
38832      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
38934      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39083      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).JML operation contract.0.key 
39083      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).JML operation contract.0.key 
39083      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.5ns 
39084      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41500      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
41539      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].JML operation contract.0 
41543      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
41747      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41961      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).JML operation contract.0.key 
41961      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).JML operation contract.0.key 
41961      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.6ns 
41962      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44370      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
44408      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].JML operation contract.0 
44410      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
44614      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44750      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).JML operation contract.0.key 
44750      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).JML operation contract.0.key 
44750      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.2ns 
44751      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47166      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
47205      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].JML operation contract.0 
47208      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
47410      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47559      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).JML operation contract.0.key 
47559      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).JML operation contract.0.key 
47559      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.3ns 
47561      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49948      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.39s 
50000      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].JML operation contract.0 
50002      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
50207      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50360      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).JML operation contract.0.key 
50360      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).JML operation contract.0.key 
50360      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
50362      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52793      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
52830      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].JML operation contract.0 
52833      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
53537      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53704      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).JML operation contract.0.key 
53704      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).JML operation contract.0.key 
53704      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.7ns 
53705      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56088      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
56124      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].JML operation contract.0 
56127      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
56530      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
210115     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts 
210116     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts 
355        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
366        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
387        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).JML normal_behavior operation contract.0.key 
486        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).JML normal_behavior operation contract.0.key 
503        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.75ms 
705        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1648       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1649       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1652       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1653       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2840       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7991       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.29s 
8180       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].JML normal_behavior operation contract.0 
8213       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 269.5ns 
9146       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9253       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).JML normal_behavior operation contract.0.key 
9254       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).JML normal_behavior operation contract.0.key 
9254       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 129.1ns 
9257       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12132      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
12194      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].JML normal_behavior operation contract.0 
12205      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
12515      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12623      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).JML operation contract.0.key 
12625      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).JML operation contract.0.key 
12626      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.3ns 
12628      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15280      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
15367      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].JML operation contract.0 
15373      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
15579      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15704      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).JML normal_behavior operation contract.0.key 
15704      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).JML normal_behavior operation contract.0.key 
15705      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.2ns 
15706      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18360      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
18423      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].JML normal_behavior operation contract.0 
18426      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
18528      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18663      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).JML operation contract.0.key 
18663      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).JML operation contract.0.key 
18663      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.3ns 
18665      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21264      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
21321      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].JML operation contract.0 
21324      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
21426      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21571      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param_helper()).JML normal_behavior operation contract.0.key 
21572      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param_helper()).JML normal_behavior operation contract.0.key 
21572      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.3ns 
21573      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24137      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
24185      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param_helper()].JML normal_behavior operation contract.0 
24187      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
24289      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24440      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).JML operation contract.0.key 
24440      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).JML operation contract.0.key 
24440      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.6ns 
24443      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27016      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
27059      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].JML operation contract.0 
27063      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
27165      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n9()).JML normal_behavior operation contract.0.key 
27285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n9()).JML normal_behavior operation contract.0.key 
27285      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 93.3ns 
27286      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29820      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
29873      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n9()].JML normal_behavior operation contract.0 
29876      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
29978      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30098      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).JML operation contract.0.key 
30098      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).JML operation contract.0.key 
30099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 593.49ns 
30100      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32673      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
32714      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].JML operation contract.0 
32717      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
32819      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32951      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).JML operation contract.0.key 
32952      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).JML operation contract.0.key 
32952      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.5ns 
32953      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35538      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
35581      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].JML operation contract.0 
35583      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
35688      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35822      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).JML normal_behavior operation contract.0.key 
35822      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).JML normal_behavior operation contract.0.key 
35822      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65ns 
35823      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38341      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
38385      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].JML normal_behavior operation contract.0 
38388      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
38494      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38632      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).JML operation contract.0.key 
38632      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).JML operation contract.0.key 
38632      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.9ns 
38633      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41163      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
41201      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].JML operation contract.0 
41204      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
41406      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41561      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).JML operation contract.0.key 
41561      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).JML operation contract.0.key 
41561      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.5ns 
41563      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44092      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
44132      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].JML operation contract.0 
44135      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
44238      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44388      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).JML operation contract.0.key 
44388      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).JML operation contract.0.key 
44388      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.6ns 
44389      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46910      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
46948      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].JML operation contract.0 
46950      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
47052      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47194      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).JML normal_behavior operation contract.0.key 
47194      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).JML normal_behavior operation contract.0.key 
47194      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.4ns 
47195      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49709      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
49747      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].JML normal_behavior operation contract.0 
49748      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
49864      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50048      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).JML normal_behavior operation contract.0.key 
50049      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).JML normal_behavior operation contract.0.key 
50049      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.1ns 
50050      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52561      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
52603      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].JML normal_behavior operation contract.0 
52605      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
52707      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52850      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).JML operation contract.0.key 
52850      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).JML operation contract.0.key 
52850      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.7ns 
52851      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55367      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
55410      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].JML operation contract.0 
55418      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
55520      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55667      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).JML operation contract.0.key 
55667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).JML operation contract.0.key 
55667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.2ns 
55668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58180      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
58220      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].JML operation contract.0 
58224      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
58326      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58475      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).JML operation contract.0.key 
58475      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).JML operation contract.0.key 
58475      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.5ns 
58476      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61024      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
61061      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].JML operation contract.0 
61063      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
61165      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61317      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).JML normal_behavior operation contract.0.key 
61317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).JML normal_behavior operation contract.0.key 
61317      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.3ns 
61318      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63809      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
63858      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].JML normal_behavior operation contract.0 
63860      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
63962      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64108      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).JML normal_behavior operation contract.0.key 
64108      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).JML normal_behavior operation contract.0.key 
64109      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.8ns 
64109      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66602      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
66639      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].JML normal_behavior operation contract.0 
66644      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.9ns 
66746      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66896      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).JML operation contract.0.key 
66896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).JML operation contract.0.key 
66896      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
66898      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69407      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
69443      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].JML operation contract.0 
69445      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
69548      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
280000     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts 
280007     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test LoopInvariants 
331        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
339        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
359        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).JML operation contract.0.key 
468        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).JML operation contract.0.key 
485        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.81ms 
705        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1625       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1625       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1628       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1628       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2920       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8037       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.33s 
8204       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].JML operation contract.0 
8235       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 312.3ns 
9496       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9609       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).JML operation contract.0.key 
9610       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).JML operation contract.0.key 
9610       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 308.5ns 
9613       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12681      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.07s 
12752      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].JML operation contract.0 
12755      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
13259      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13383      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).JML operation contract.0.key 
13384      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).JML operation contract.0.key 
13384      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79ns 
13389      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16366      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
16426      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].JML operation contract.0 
16430      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
16833      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16960      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).JML operation contract.0.key 
16960      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).JML operation contract.0.key 
16961      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.3ns 
16962      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19785      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
19836      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].JML operation contract.0 
19839      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 24.1ns 
20844      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21022      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).JML operation contract.0.key 
21023      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).JML operation contract.0.key 
21023      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 114.1ns 
21024      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23785      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
23828      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].JML operation contract.0 
23831      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 9.7ns 
24654      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24788      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).JML operation contract.0.key 
24788      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).JML operation contract.0.key 
24789      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
24790      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27586      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.8s 
27626      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].JML operation contract.0 
27628      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
28432      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
28570      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).JML operation contract.0.key 
28571      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).JML operation contract.0.key 
28571      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.6ns 
28572      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31283      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
31323      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].JML operation contract.0 
31326      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.4ns 
32029      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32182      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).JML operation contract.0.key 
32182      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).JML operation contract.0.key 
32182      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.7ns 
32183      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34903      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
34958      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].JML operation contract.0 
34962      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
35366      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35508      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).JML operation contract.0.key 
35508      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).JML operation contract.0.key 
35508      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63ns 
35509      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38207      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
38245      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].JML operation contract.0 
38247      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
38449      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38585      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).JML operation contract.0.key 
38585      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).JML operation contract.0.key 
38585      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.9ns 
38586      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41296      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
41334      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].JML operation contract.0 
41337      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
41543      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
41726      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).JML operation contract.0.key 
41727      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).JML operation contract.0.key 
41727      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.1ns 
41728      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44412      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
44451      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].JML operation contract.0 
44453      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
44875      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45018      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).JML operation contract.0.key 
45019      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).JML operation contract.0.key 
45019      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.6ns 
45020      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47717      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
47756      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].JML operation contract.0 
47758      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
48161      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48315      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).JML operation contract.0.key 
48316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).JML operation contract.0.key 
48316      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.7ns 
48317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50991      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
51028      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].JML operation contract.0 
51031      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
51434      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
51588      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).JML operation contract.0.key 
51588      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).JML operation contract.0.key 
51589      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 99.5ns 
51589      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54238      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
54273      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].JML operation contract.0 
54275      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
54480      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54639      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).JML operation contract.0.key 
54639      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).JML operation contract.0.key 
54639      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65ns 
54640      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57334      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
57380      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].JML operation contract.0 
57383      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
57585      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57722      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).JML normal_behavior operation contract.0.key 
57723      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).JML normal_behavior operation contract.0.key 
57723      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.6ns 
57724      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60396      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
60429      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].JML normal_behavior operation contract.0 
60434      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
60536      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
60682      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).JML normal_behavior operation contract.0.key 
60683      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).JML normal_behavior operation contract.0.key 
60683      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.7ns 
60684      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63334      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
63381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].JML normal_behavior operation contract.0 
63384      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
63688      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
344023     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test LoopInvariants 
344024     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples 
335        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
339        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
360        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
468        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
490        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.92ms 
698        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1494       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1494       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1496       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1496       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3084       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7848       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.15s 
7975       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].JML operation contract.0 
8007       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 346.2ns 
8534       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
8635       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
8636       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).JML operation contract.0.key 
8636       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 296.2ns 
8638       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
11333      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
11440      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].JML operation contract.0 
11448      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 38.1ns 
11651      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
11758      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).JML normal_behavior operation contract.0.key 
11759      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).JML normal_behavior operation contract.0.key 
11759      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 123.8ns 
11761      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14429      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
14486      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].JML normal_behavior operation contract.0 
14489      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
14604      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14709      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).JML normal_behavior operation contract.0.key 
14710      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).JML normal_behavior operation contract.0.key 
14710      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.9ns 
14711      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17271      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
17324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].JML normal_behavior operation contract.0 
17327      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
17429      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
17575      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).JML normal_behavior operation contract.0.key 
17575      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).JML normal_behavior operation contract.0.key 
17576      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.2ns 
17577      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20095      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
20141      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].JML normal_behavior operation contract.0 
20143      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
20245      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20358      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).JML normal_behavior operation contract.0.key 
20358      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).JML normal_behavior operation contract.0.key 
20358      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.7ns 
20359      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22840      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
22884      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].JML normal_behavior operation contract.0 
22886      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
22990      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23108      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).JML normal_behavior operation contract.0.key 
23109      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).JML normal_behavior operation contract.0.key 
23109      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
23110      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25576      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
25635      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].JML normal_behavior operation contract.0 
25639      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
25841      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25966      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).JML normal_behavior operation contract.0.key 
25966      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).JML normal_behavior operation contract.0.key 
25966      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 111.3ns 
25968      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28462      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
28506      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].JML normal_behavior operation contract.0 
28508      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
28610      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
28734      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.1.key 
28735      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.1.key 
28735      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.6ns 
28736      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31152      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
31196      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].JML normal_behavior operation contract.1 
31199      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
31302      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
31430      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.0.key 
31430      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).JML normal_behavior operation contract.0.key 
31430      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.4ns 
31431      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33840      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
33888      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].JML normal_behavior operation contract.0 
33891      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
34093      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
34245      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).JML normal_behavior operation contract.0.key 
34245      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).JML normal_behavior operation contract.0.key 
34246      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.9ns 
34246      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36662      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
36716      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].JML normal_behavior operation contract.0 
36718      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
36820      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
36953      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).JML operation contract.0.key 
36953      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).JML operation contract.0.key 
36953      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.1ns 
36954      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39384      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
39425      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].JML operation contract.0 
39427      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
39528      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39661      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).JML normal_behavior operation contract.0.key 
39661      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).JML normal_behavior operation contract.0.key 
39662      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.7ns 
39662      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42356      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
42402      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].JML normal_behavior operation contract.0 
42405      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 66.9ns 
42506      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42642      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).JML normal_behavior operation contract.0.key 
42642      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).JML normal_behavior operation contract.0.key 
42642      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
42643      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45047      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.4s 
45087      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].JML normal_behavior operation contract.0 
45089      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
45191      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45354      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).JML normal_behavior operation contract.0.key 
45354      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).JML normal_behavior operation contract.0.key 
45354      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
45355      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47742      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.39s 
47779      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].JML normal_behavior operation contract.0 
47781      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
47884      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48027      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).JML normal_behavior operation contract.0.key 
48027      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).JML normal_behavior operation contract.0.key 
48027      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.4ns 
48028      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50397      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
50436      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].JML normal_behavior operation contract.0 
50439      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
50541      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50689      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).JML normal_behavior operation contract.0.key 
50690      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).JML normal_behavior operation contract.0.key 
50690      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104ns 
50691      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
53055      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
53106      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].JML normal_behavior operation contract.0 
53110      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
53212      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53362      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).JML normal_behavior operation contract.0.key 
53362      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).JML normal_behavior operation contract.0.key 
53362      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.8ns 
53363      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55716      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.35s 
55752      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].JML normal_behavior operation contract.0 
55755      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
55856      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56010      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).JML normal_behavior operation contract.0.key 
56010      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).JML normal_behavior operation contract.0.key 
56010      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56ns 
56011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58364      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.35s 
58401      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].JML normal_behavior operation contract.0 
58404      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
58509      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58658      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).JML normal_behavior operation contract.0.key 
58658      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).JML normal_behavior operation contract.0.key 
58658      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.2ns 
58659      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61023      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
61060      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].JML normal_behavior operation contract.0 
61062      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
61164      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61319      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).JML normal_behavior operation contract.0.key 
61319      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).JML normal_behavior operation contract.0.key 
61320      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.1ns 
61320      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63675      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.35s 
63711      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].JML normal_behavior operation contract.0 
63714      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
63817      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63972      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).JML normal_behavior operation contract.0.key 
63972      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).JML normal_behavior operation contract.0.key 
63972      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.1ns 
63973      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66341      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
66378      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].JML normal_behavior operation contract.0 
66380      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
66481      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66646      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).JML normal_behavior operation contract.0.key 
66647      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).JML normal_behavior operation contract.0.key 
66647      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 85.6ns 
66648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69029      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
69077      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].JML normal_behavior operation contract.0 
69080      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
69182      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69343      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).JML normal_behavior operation contract.0.key 
69343      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).JML normal_behavior operation contract.0.key 
69343      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.1ns 
69346      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71717      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
71756      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].JML normal_behavior operation contract.0 
71758      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
71859      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72026      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).JML normal_behavior operation contract.0.key 
72026      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).JML normal_behavior operation contract.0.key 
72026      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
72028      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
74386      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
74420      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].JML normal_behavior operation contract.0 
74426      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
74528      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
74694      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).JML normal_behavior operation contract.0.key 
74695      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).JML normal_behavior operation contract.0.key 
74695      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.9ns 
74696      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77039      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.34s 
77082      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].JML normal_behavior operation contract.0 
77085      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
77187      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
77359      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.1.key 
77359      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.1.key 
77359      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.8ns 
77360      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
79693      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.33s 
79735      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].JML normal_behavior operation contract.1 
79737      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
79839      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
80008      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.0.key 
80008      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).JML normal_behavior operation contract.0.key 
80008      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.1ns 
80009      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
82369      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
82412      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].JML normal_behavior operation contract.0 
82414      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
82517      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
82699      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).JML normal_behavior operation contract.0.key 
82699      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).JML normal_behavior operation contract.0.key 
82699      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.7ns 
82700      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
85039      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.34s 
85072      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].JML normal_behavior operation contract.0 
85074      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
85175      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
85365      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).JML normal_behavior operation contract.0.key 
85366      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).JML normal_behavior operation contract.0.key 
85366      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.7ns 
85367      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
87738      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
87772      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].JML normal_behavior operation contract.0 
87774      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
87876      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
432268     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples 
432269     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects 
344        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
360        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
398        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).JML operation contract.0.key 
516        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).JML operation contract.0.key 
533        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.76ms 
749        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1637       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1637       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1640       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1640       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2807       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5702       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8308       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.56s 
8425       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].JML operation contract.0 
8508       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 8.32ms 
9042       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9152       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).JML normal_behavior operation contract.0.key 
9153       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).JML normal_behavior operation contract.0.key 
9154       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 853.09ns 
9156       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10125      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12141      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
12206      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].JML normal_behavior operation contract.0 
12209      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
12613      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12745      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.1.key 
12746      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.1.key 
12746      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 74.8ns 
12747      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13678      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
15632      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
15706      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].JML normal_behavior operation contract.1 
15709      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
15913      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16024      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.0.key 
16025      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).JML normal_behavior operation contract.0.key 
16025      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.4ns 
16026      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16923      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
18915      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.89s 
18966      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].JML normal_behavior operation contract.0 
18968      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
19171      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19294      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).JML normal_behavior operation contract.0.key 
19294      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).JML normal_behavior operation contract.0.key 
19294      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.7ns 
19296      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20187      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
22130      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.83s 
22181      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].JML normal_behavior operation contract.0 
22184      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
22286      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22402      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).JML operation contract.0.key 
22402      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).JML operation contract.0.key 
22402      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.3ns 
22405      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23283      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
25182      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
25237      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.Naumann[object.Naumann::Pair_m(int,int)].JML operation contract.0 
25240      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
26748      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
26907      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).JML operation contract.0.key 
26908      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).JML operation contract.0.key 
26908      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
26909      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27770      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
29677      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
29722      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].JML operation contract.0 
29725      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
30329      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30561      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).JML operation contract.0.key 
30562      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).JML operation contract.0.key 
30562      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65ns 
30564      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31456      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
33344      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
33387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].JML operation contract.0 
33389      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
33491      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33619      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.1.key 
33620      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.1.key 
33620      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 96.1ns 
33621      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34467      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
36366      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
36417      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].JML operation contract.1 
36420      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
37326      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
37492      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.0.key 
37493      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).JML operation contract.0.key 
37493      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.7ns 
37494      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38358      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
40204      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
40255      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].JML operation contract.0 
40257      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
41061      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41242      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).JML operation contract.0.key 
41242      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).JML operation contract.0.key 
41242      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.5ns 
41244      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42106      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
44022      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
44062      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_if_two_object_creation()].JML operation contract.0 
44064      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
44870      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45031      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).JML operation contract.0.key 
45031      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).JML operation contract.0.key 
45031      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.3ns 
45032      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45896      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
47745      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
47785      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].JML operation contract.0 
47787      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
48293      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48453      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).JML normal_behavior operation contract.0.key 
48454      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).JML normal_behavior operation contract.0.key 
48454      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105.8ns 
48455      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49296      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
51160      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
51200      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].JML normal_behavior operation contract.0 
51202      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
51605      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
51763      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.1.key 
51763      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.1.key 
51763      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.2ns 
51764      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
52608      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
54486      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
54524      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].JML operation contract.1 
54526      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
54632      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54793      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.0.key 
54793      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).JML operation contract.0.key 
54793      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.4ns 
54794      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55623      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
57540      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
57577      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].JML operation contract.0 
57580      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
57681      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57895      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).JML operation contract.0.key 
57895      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).JML operation contract.0.key 
57895      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.5ns 
57896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58723      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
60599      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
60636      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].JML operation contract.0 
60638      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
60841      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61028      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).JML operation contract.0.key 
61029      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).JML operation contract.0.key 
61029      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.4ns 
61030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61866      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
63788      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
63827      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].JML operation contract.0 
63829      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
64033      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64198      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).JML operation contract.0.key 
64199      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).JML operation contract.0.key 
64199      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.2ns 
64199      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65028      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
66876      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
66913      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].JML operation contract.0 
66915      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
67117      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
67282      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML accessible clause.0.key 
67282      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML accessible clause.0.key 
67282      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.7ns 
67283      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68108      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
69983      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
70022      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].JML accessible clause.0 
70024      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.7ns 
70126      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70283      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML normal_behavior operation contract.0.key 
70284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).JML normal_behavior operation contract.0.key 
70284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.9ns 
70285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71118      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
72977      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
73013      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].JML normal_behavior operation contract.0 
73016      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
73120      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
73284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).JML normal_behavior operation contract.0.key 
73284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).JML normal_behavior operation contract.0.key 
73284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.9ns 
73286      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
74113      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
75974      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
76010      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].JML normal_behavior operation contract.0 
76012      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
76315      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76536      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/PasswordFile/passwordfile.SecurePasswordFile(passwordfile.SecurePasswordFile___userIndex()).JML accessible clause.0.key 
76536      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/PasswordFile/passwordfile.SecurePasswordFile(passwordfile.SecurePasswordFile___userIndex()).JML accessible clause.0.key 
76536      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.4ns 
76538      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
79046      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
79080      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof passwordfile.SecurePasswordFile[passwordfile.SecurePasswordFile::$userIndex()].JML accessible clause.0 
79083      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
79189      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
511806     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects 
511808     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting 
323        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
341        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
374        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).JML normal_behavior operation contract.0.key 
519        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).JML normal_behavior operation contract.0.key 
539        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.84ms 
744        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1629       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1631       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1633       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1634       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2810       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8557       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.81s 
8760       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].JML normal_behavior operation contract.0 
8844       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 369.5ns 
9990       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
10122      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage((B)).JML normal_behavior operation contract.0.key 
10125      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage((B)).JML normal_behavior operation contract.0.key 
10126      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 311.9ns 
10128      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13521      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.39s 
13604      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage([B)].JML normal_behavior operation contract.0 
13607      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
14212      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14348      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).JML normal_behavior operation contract.0.key 
14348      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).JML normal_behavior operation contract.0.key 
14348      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.2ns 
14350      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17596      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.25s 
17664      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage()].JML normal_behavior operation contract.0 
17667      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
19110      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19273      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).JML normal_behavior operation contract.0.key 
19275      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).JML normal_behavior operation contract.0.key 
19275      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 104.5ns 
19276      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22478      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.2s 
22540      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].JML normal_behavior operation contract.0 
22542      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.1ns 
22644      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22804      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).JML normal_behavior operation contract.0.key 
22804      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).JML normal_behavior operation contract.0.key 
22804      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.9ns 
22806      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25934      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.13s 
25989      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].JML normal_behavior operation contract.0 
25992      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
26099      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
26223      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).JML normal_behavior operation contract.0.key 
26224      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).JML normal_behavior operation contract.0.key 
26224      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.8ns 
26225      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29360      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.13s 
29416      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].JML normal_behavior operation contract.0 
29419      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
29521      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
29651      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment___rep()).JML accessible clause.0.key 
29651      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment___rep()).JML accessible clause.0.key 
29651      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.1ns 
29652      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32755      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.1s 
32811      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::$rep()].JML accessible clause.0 
32813      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
32918      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33078      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.1.key 
33078      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.1.key 
33078      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.7ns 
33079      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36144      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.06s 
36207      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].JML normal_behavior operation contract.1 
36209      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
45496      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45763      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.0.key 
45763      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).JML normal_behavior operation contract.0.key 
45763      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.9ns 
45764      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48815      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.05s 
48867      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].JML normal_behavior operation contract.0 
48870      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
55999      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56177      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Message(java.lang.Object___inv_()).JML accessible clause.0.key 
56177      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Message(java.lang.Object___inv_()).JML accessible clause.0.key 
56177      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.1ns 
56178      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
59256      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.08s 
59326      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Message[java.lang.Object::<inv>()].JML accessible clause.0 
59329      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
59531      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59682      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML accessible clause.0.key 
59682      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML accessible clause.0.key 
59682      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58ns 
59683      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62746      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.06s 
62796      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::resultReady()].JML accessible clause.0 
62799      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
64505      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64676      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML normal_behavior operation contract.0.key 
64677      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__resultReady()).JML normal_behavior operation contract.0.key 
64677      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.5ns 
64678      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
67711      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
67761      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::resultReady()].JML normal_behavior operation contract.0 
67763      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
68367      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
68558      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onSendResult()).JML normal_behavior operation contract.0.key 
68558      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onSendResult()).JML normal_behavior operation contract.0.key 
68558      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.2ns 
68560      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71586      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
71634      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onSendResult()].JML normal_behavior operation contract.0 
71636      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
71838      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72002      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.1.key 
72002      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.1.key 
72002      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.9ns 
72003      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
75039      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
75096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onCollectBallot(simple_evoting.Message)].JML normal_behavior operation contract.1 
75100      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
75302      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
75479      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.0.key 
75479      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(simple_evoting.Server__onCollectBallot(simple_evoting.Message)).JML normal_behavior operation contract.0.key 
75479      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.6ns 
75480      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
78472      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.99s 
78528      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[simple_evoting.Server::onCollectBallot(simple_evoting.Message)].JML normal_behavior operation contract.0 
78530      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
79133      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
79303      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(java.lang.Object___inv_()).JML accessible clause.0.key 
79303      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Server(java.lang.Object___inv_()).JML accessible clause.0.key 
79303      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.3ns 
79304      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
82347      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
82393      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Server[java.lang.Object::<inv>()].JML accessible clause.0 
82396      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
82598      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
82767      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
82767      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
82767      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.1ns 
82768      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
85782      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.01s 
85828      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMTEnv[simple_evoting.SMTEnv::send(int,int,int,simple_evoting.Server,int)].JML normal_behavior operation contract.0 
85830      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
86133      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
86297      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
86297      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).JML normal_behavior operation contract.0.key 
86297      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.1ns 
86298      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
89338      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
89383      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].JML normal_behavior operation contract.0 
89385      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
89491      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
89667      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__publishResult()).JML normal_behavior operation contract.0.key 
89667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__publishResult()).JML normal_behavior operation contract.0.key 
89667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.8ns 
89668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
92698      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
92747      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[simple_evoting.Setup::publishResult()].JML normal_behavior operation contract.0 
92749      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
93351      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
93544      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__main()).JML normal_behavior operation contract.0.key 
93544      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(simple_evoting.Setup__main()).JML normal_behavior operation contract.0.key 
93544      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.7ns 
93546      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
96613      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.07s 
96663      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[simple_evoting.Setup::main()].JML normal_behavior operation contract.0 
96666      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
129329     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
129588     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(java.lang.Object___inv_()).JML accessible clause.0.key 
129589     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Setup(java.lang.Object___inv_()).JML accessible clause.0.key 
129589     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 122.5ns 
129590     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
132572     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
132621     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Setup[java.lang.Object::<inv>()].JML accessible clause.0 
132623     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
136029     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
136341     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.1.key 
136341     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.1.key 
136342     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 570.49ns 
136343     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
139317     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
139365     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].JML normal_behavior operation contract.1 
139370     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
143600     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
143830     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.0.key 
143830     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).JML normal_behavior operation contract.0.key 
143830     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.1ns 
143831     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
146830     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
146887     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].JML normal_behavior operation contract.0 
146889     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
153912     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
154158     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(java.lang.Object___inv_()).JML accessible clause.0.key 
154159     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(java.lang.Object___inv_()).JML accessible clause.0.key 
154159     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.6ns 
154159     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
157130     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
157182     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[java.lang.Object::<inv>()].JML accessible clause.0 
157184     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
157387     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
669560     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting 
669561     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting_nomacro 
357        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
372        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
393        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.key 
545        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.key 
565        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.09ms 
798        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1665       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1668       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1672       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1672       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2917       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7588       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 6.79s 
7710       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].Non-interference contract.0 
7782       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 350.5ns 
23954      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
24148      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.key 
24148      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.key 
24148      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.9ns 
24150      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26796      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
26853      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].Non-interference contract.0 
26856      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
27160      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27338      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.key 
27338      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.key 
27340      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.06ms 
27341      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29963      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
30017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].Non-interference contract.0 
30031      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 30.1ns 
30335      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
30453      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.key 
30454      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.key 
30454      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.1ns 
30455      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32938      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
33013      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].Non-interference contract.0 
33020      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10ns 
33323      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
33437      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.key 
33437      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.key 
33437      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77.8ns 
33438      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35837      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.4s 
35879      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].Non-interference contract.0 
35882      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
36087      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
705922     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting_nomacro 
705923     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ConditionalConfidential_nomacro 
705923     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ConditionalConfidential_nomacro 
705924     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample_nomacro 
319        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
336        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
356        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.key 
455        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.key 
479        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.3ms 
678        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1662       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1663       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1666       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1666       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2890       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7799       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.12s 
7984       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].Non-interference contract.0 
8041       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 358.6ns 
11012      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
717286     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample_nomacro 
717288     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking_nomacro 
328        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
331        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
355        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
480        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
501        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.7ms 
700        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1628       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1629       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1632       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1633       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3017       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8481       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.78s 
8641       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].Non-interference contract.0 
8709       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 359.2ns 
12011      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12211      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.key 
12212      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.key 
12212      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 274.5ns 
12214      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15249      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.03s 
15317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].Non-interference contract.0 
15320      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 37.2ns 
16325      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16460      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.key 
16461      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.key 
16461      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.3ns 
16463      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19395      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
19466      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].Non-interference contract.0 
19475      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
19782      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19913      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.key 
19914      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.key 
19914      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.3ns 
19915      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22755      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
22809      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].Non-interference contract.0 
22812      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
23115      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23239      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.key 
23240      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.key 
23240      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.2ns 
23241      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26056      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
26125      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].Non-interference contract.0 
26127      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
61409      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
61678      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
61678      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.key 
61678      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.4ns 
61679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64384      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
64456      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].Non-interference contract.0 
64458      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.2ns 
66064      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66328      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.key 
66329      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.key 
66329      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.1ns 
66330      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68994      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
69050      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].Non-interference contract.0 
69052      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
69760      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69916      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.key 
69917      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.key 
69918      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.3ns 
69919      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72581      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
72632      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].Non-interference contract.0 
72634      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
72837      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
72978      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.key 
72978      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.key 
72979      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.4ns 
72979      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
75649      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
75693      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].Non-interference contract.0 
75696      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
75898      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
793507     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking_nomacro 
793508     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts_nomacro 
343        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
366        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
401        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key 
522        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.key 
539        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.72ms 
739        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1623       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1623       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1624       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1624       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2879       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8181       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.44s 
8315       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].Non-interference contract.0 
8393       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 306.6ns 
9731       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9860       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key 
9860       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.key 
9860       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 272.2ns 
9862       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12728      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
12804      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].Non-interference contract.0 
12807      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
13312      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13473      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key 
13473      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.key 
13474      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 439.9ns 
13475      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
16342      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].Non-interference contract.0 
16345      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.2ns 
17001      WARN  Thread-5        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

17074      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_l_B)(_l_A_Before<<origin(requires @ file IFBlockExamples.java @ line 250) ([])>>)),elem-update(exc_B)(null)),elem-update(l1_1)(l1_Before<<origin(requires @ file IFBlockExamples.java @ line 250) ([])>>)),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 256) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_0 = _l_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#73 = false;
    java.lang.Throwable thrownExc#75;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#74) {
      exc#73 = true;
      thrownExc#75 = e#74;
    }
  }
}\> (and(imp(equals(exc#73,TRUE),\<{
  try {
    method-frame (
      source=while_block_insecure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#75;
      }
      {
        l1_1++;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#73,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

17077      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17265      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key 
17265      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.key 
17265      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 75.7ns 
17270      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
19992      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
20052      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].Non-interference contract.0 
20055      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
20615      WARN  Thread-7        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

20664      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_l_B)(_l_A_Before<<origin(requires @ file IFBlockExamples.java @ line 226) ([])>>)),elem-update(exc_B)(null)),elem-update(l1_1)(l1_Before<<origin(requires @ file IFBlockExamples.java @ line 226) ([])>>)),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 232) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_0 = _l_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#73 = false;
    java.lang.Throwable thrownExc#75;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#74) {
      exc#73 = true;
      thrownExc#75 = e#74;
    }
  }
}\> (and(imp(equals(exc#73,TRUE),\<{
  try {
    method-frame (
      source=while_block_secure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#75;
      }
      {
        l1_1++;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#73,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

20665      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
20819      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key 
20819      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.key 
20820      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 514.39ns 
20821      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
23501      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.68s 
23548      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].Non-interference contract.0 
23551      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
24312      WARN  Thread-9        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),and(inInt(l1_1_Before_0_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),and(inInt(l1_1_Before_0_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

24363      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_l_B)(_l_A_Before),elem-update(exc_B)(null)),parallel-upd(elem-update(l1_1)(anonOut_l1_1)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([])>>,elem-update(heap)(heap_After_BLOCK)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([])>>)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([assignable @ file IFBlockExamples.java @ line 206])>>)<<origin(assignable @ file IFBlockExamples.java @ line 206) ([assignable @ file IFBlockExamples.java @ line 206])>>,update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(l1_1Before_LOOP)(l1_1)),elem-update(_l_BBefore_LOOP)(_l_B)),update-application(parallel-upd(parallel-upd(elem-update(l1_1)(l1_1_0),elem-update(_l_B)(_l_B_0)),elem-update(heap)(anon(heap,empty<<origin(assignable @ file IFBlockExamples.java @ line 213) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_l_B),imp(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean b_2 = _l_B > 0;
  }
}\] (equals(b_2,TRUE)),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    boolean exc#107 = false;
    java.lang.Throwable thrownExc#109;
    try {
      {
        if (_l_B > 0) {
          _l_B--;
          l1_1++;
        }
      }
    } catch (java.lang.Throwable e#108) {
      exc#107 = true;
      thrownExc#109 = e#108;
    }
  }
}\> (and(imp(equals(exc#107,TRUE),\<{
  try {
    method-frame (
      source=block_while_secure(int)@contract.IFBlockExamples,
      this=self_B
    ) {
      {
        throw thrownExc#109;
      }
      this.low = l1_1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#107,TRUE)),and(and(geq(_l_B,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_l_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),and(inInt(l1_1_Before_0_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),and(inInt(l1_1_Before_0_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

24364      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
24511      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key 
24511      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.key 
24511      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.3ns 
24512      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27255      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
27301      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].Non-interference contract.0 
27303      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
29419      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
29605      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key 
29605      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.key 
29605      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 72.3ns 
29606      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32272      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
32316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].Non-interference contract.0 
32319      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
34470      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
34677      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key 
34678      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.key 
34678      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105ns 
34679      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
37315      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
37361      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].Non-interference contract.0 
37364      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
39287      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39506      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key 
39506      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.key 
39507      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.5ns 
39508      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42113      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
42155      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].Non-interference contract.0 
42157      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
44365      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44600      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key 
44600      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.key 
44600      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 106.2ns 
44601      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47235      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
47282      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].Non-interference contract.0 
47285      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
47889      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
48118      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key 
48119      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.key 
48119      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.5ns 
48120      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50724      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
50764      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].Non-interference contract.0 
50766      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
51173      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
51342      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key 
51343      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.key 
51343      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.1ns 
51344      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
53953      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
53994      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].Non-interference contract.0 
53996      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.4ns 
54499      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54667      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key 
54667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.key 
54667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68ns 
54669      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57300      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
57344      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].Non-interference contract.0 
57347      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
57952      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
58114      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key 
58115      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.key 
58115      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.9ns 
58116      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60712      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
60750      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].Non-interference contract.0 
60753      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
61356      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
61538      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key 
61538      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.key 
61539      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.9ns 
61540      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64125      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
64186      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].Non-interference contract.0 
64188      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
64892      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65081      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key 
65081      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.key 
65082      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
65082      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
67696      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
67732      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].Non-interference contract.0 
67734      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
70247      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70539      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key 
70539      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.key 
70540      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.7ns 
70540      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73106      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
73142      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].Non-interference contract.0 
73145      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
76256      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
870118     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts_nomacro 
870133     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts_nomacro 
498        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
513        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
561        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.key 
677        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.key 
695        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2ms 
907        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1706       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1706       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1710       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1710       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2923       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8117       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.21s 
8290       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].Non-interference contract.0 
8354       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 406.69ns 
12240      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12370      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.key 
12371      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.key 
12371      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 282.9ns 
12377      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15257      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
15339      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].Non-interference contract.0 
15345      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10ns 
15749      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15870      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.key 
15870      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.key 
15870      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.2ns 
15872      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18629      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.76s 
18695      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].Non-interference contract.0 
18701      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
19004      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19127      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.key 
19127      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.key 
19127      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.7ns 
19130      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21856      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
21901      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].Non-interference contract.0 
21904      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
22106      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22225      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.key 
22225      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.key 
22225      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.4ns 
22226      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24886      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
24936      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].Non-interference contract.0 
24938      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.2ns 
25142      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25286      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.key 
25287      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.key 
25287      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 106.8ns 
25288      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27991      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
28035      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].Non-interference contract.0 
28043      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
29164      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
29293      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.key 
29293      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.key 
29293      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.2ns 
29299      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31940      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
31981      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].Non-interference contract.0 
31983      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
32186      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32316      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.key 
32316      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.key 
32316      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.4ns 
32317      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34952      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
35008      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].Non-interference contract.0 
35010      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
35821      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
35971      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.key 
35971      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.key 
35971      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.8ns 
35972      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38575      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
38615      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].Non-interference contract.0 
38617      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
38719      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38862      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.key 
38863      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.key 
38863      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.7ns 
38864      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41451      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
41498      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].Non-interference contract.0 
41500      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
42704      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42869      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.key 
42869      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.key 
42869      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.2ns 
42870      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45467      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
45511      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].Non-interference contract.0 
45514      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
46118      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46275      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.key 
46275      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.key 
46276      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
46277      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48894      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
48932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].Non-interference contract.0 
48934      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
49138      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.key 
49284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.key 
49284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86.6ns 
49285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51849      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
51887      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].Non-interference contract.0 
51889      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
51993      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52136      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.key 
52137      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.key 
52137      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.2ns 
52138      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54697      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
54734      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].Non-interference contract.0 
54736      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
54838      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54984      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.key 
54984      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.key 
54984      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.7ns 
54985      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57537      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
57573      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].Non-interference contract.0 
57576      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
57882      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
58035      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.key 
58035      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.key 
58036      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 555.39ns 
58037      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60583      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
60619      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].Non-interference contract.0 
60621      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
60825      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
60991      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.key 
60992      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.key 
60992      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.5ns 
60993      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63585      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
63620      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].Non-interference contract.0 
63622      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
63824      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63986      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.key 
63986      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.key 
63986      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.2ns 
63987      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66519      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
66553      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].Non-interference contract.0 
66555      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
66658      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66810      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.key 
66810      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.key 
66810      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
66811      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69460      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
69493      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].Non-interference contract.0 
69496      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
69601      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69767      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.key 
69767      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.key 
69767      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.9ns 
69769      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72289      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
72324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].Non-interference contract.0 
72326      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
72530      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
943092     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts_nomacro 
943096     INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test LoopInvariants_nomacro 
327        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
333        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
357        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key 
456        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.key 
486        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.65ms 
705        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1621       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1621       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1622       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1622       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3056       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8365       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.66s 
8520       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].Non-interference contract.0 
8575       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 341.5ns 
10316      WARN  Thread-1        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

10434      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(x_B),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,self_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 459) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_while_3(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 459) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

10437      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
10574      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key 
10577      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.key 
10577      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 370.3ns 
10579      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
13718      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.14s 
13815      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].Non-interference contract.0 
13822      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
14687      WARN  Thread-3        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

14741      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 431) ([])>>),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,selfAtPost_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 439) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while_2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 439) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

14744      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
14913      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key 
14913      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.key 
14914      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 77ns 
14916      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17896      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
17952      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].Non-interference contract.0 
17955      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.5ns 
18656      WARN  Thread-5        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

18762      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 411) ([])>>),elem-update(exc_B)(null)),elem-update(heap)(store(heapAtPre_B<<anonHeapFunction>>,self_B,loop.IFLoopExamples::$low,add(Z(1(#)),int::select(heapAtPre_A<<anonHeapFunction>>,selfAtPost_A,loop.IFLoopExamples::$low))))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 419) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while_4(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
      this.low = this.low + 1;
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(leq(Z(0(#)),_x_B)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 419) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

18771      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
18931      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key 
18931      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.key 
18932      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.5ns 
18933      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21849      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
21896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].Non-interference contract.0 
21899      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
22315      WARN  Thread-7        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

22408      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 369) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 377) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 377) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

22410      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
22562      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key 
22563      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.key 
22563      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
22564      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25431      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.87s 
25477      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].Non-interference contract.0 
25479      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 9.7ns 
26065      WARN  Thread-9        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

26088      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(x_B)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 336) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 336) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

26089      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
26270      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key 
26270      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.key 
26270      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 72.8ns 
26272      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
29082      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
29130      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].Non-interference contract.0 
29132      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10ns 
29522      WARN  Thread-11       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

29537      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 287) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 295) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
            while (_x_B > 0) {
              this.low = this.low + 1;
              _x_B = _x_B - 1;
            }
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 295) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

29540      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
29704      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key 
29705      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.key 
29705      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 116.1ns 
29706      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32523      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
32566      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].Non-interference contract.0 
32568      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
32965      WARN  Thread-13       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

32974      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 246) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 254) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 254) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

32975      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33137      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key 
33137      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.key 
33137      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.8ns 
33138      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35947      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
35989      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].Non-interference contract.0 
35991      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
36401      WARN  Thread-15       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

36495      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 216) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 224) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          while (_x_B > 0) {
            this.low = this.low + 1;
            _x_B = _x_B - 1;
          }
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_nestedWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 224) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

36500      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
36656      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key 
36656      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.key 
36657      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.3ns 
36658      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39425      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
39485      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].Non-interference contract.0 
39489      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
39975      WARN  Thread-17       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

39993      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(x_B)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 205) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=notSecure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 205) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

39994      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
40170      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key 
40171      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.key 
40171      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.4ns 
40172      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42925      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
42965      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].Non-interference contract.0 
42967      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
43099      WARN  Thread-19       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_A<<anonHeapFunction>>)),not(equals(self_A_A,null))),equals(boolean::select(heap,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),inInt(_x_A_Before_A)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>),update-application(parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap)))))),imp(equals(b_Before_A,FALSE),and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_B<<anonHeapFunction>>)),not(equals(self_A_B,null))),equals(boolean::select(heap,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),inInt(_x_A_Before_B)),geq(_x_A_Before_B,Z(1(#)))),update-application(parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap)))))),imp(equals(b_Before_B,FALSE),and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

43170      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_A<<anonHeapFunction>>),elem-update(_x_A)(x_A))<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>,elem-update(exc_A)(null)<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>,update-application(parallel-upd(elem-update(heapBefore_LOOP)(heap),elem-update(_x_ABefore_LOOP)(_x_A)),update-application(parallel-upd(elem-update(_x_A)(_x_A_0),elem-update(heap)(anon(heap,singleton(self_A,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 186) ([])>>,anon_heap_LOOP<<anonHeapFunction>>))),update-application(elem-update(variant)(_x_A),imp(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    boolean b = _x_A > 0;
  }
}\] (equals(b,TRUE)),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    boolean exc#3 = false;
    java.lang.Throwable thrownExc#5;
    try {
      {
        if (_x_A > 0) {
          this.low = this.low + 1;
          _x_A = _x_A - 1;
        }
      }
    } catch (java.lang.Throwable e#4) {
      exc#3 = true;
      thrownExc#5 = e#4;
    }
  }
}\> (and(imp(equals(exc#3,TRUE),\<{
  try {
    method-frame (
      source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
      this=self_A
    ) {
      {
        throw thrownExc#5;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_A = e;
  }
}\> (not(and(and(equals(self_A,selfAtPost_A),equals(exc_A,excAtPost_A)),equals(heapAtPost_A,heap))<<origin(requires @ file IFLoopExamples.java @ line 178) ([])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>)<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>),imp(not(equals(exc#3,TRUE)),and(and(geq(_x_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_A,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 186) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP,o,f)))))),prec(_x_A,variant)))<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>))<<origin(requires @ file IFLoopExamples.java @ line 178) ([requires @ file IFLoopExamples.java @ line 178])>>))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_A<<anonHeapFunction>>)),not(equals(self_A_A,null))),equals(boolean::select(heap,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),inInt(_x_A_Before_A)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>),update-application(parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap)))))),imp(equals(b_Before_A,FALSE),and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_B<<anonHeapFunction>>)),not(equals(self_A_B,null))),equals(boolean::select(heap,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),inInt(_x_A_Before_B)),geq(_x_A_Before_B,Z(1(#)))),update-application(parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap)))))),imp(equals(b_Before_B,FALSE),and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

43173      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
43328      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key 
43328      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.key 
43328      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.6ns 
43330      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46083      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
46127      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].Non-interference contract.0 
46129      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
47244      WARN  Thread-21       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

47338      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#))),elem-update(heap)(heap_After_LOOP_0))),update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 166) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 168) ([])>>),imp(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=insecure_twoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 166) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 168) ([])>>,variant_2)))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 147, assignable @ file IFLoopExamples.java @ line 155])>>))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

47346      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
47510      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key 
47510      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.key 
47515      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67ns 
47516      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50292      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
50331      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].Non-interference contract.0 
50333      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
51833      WARN  Thread-23       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

51859      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#)))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([])>>,elem-update(heap)(heap_After_LOOP_0)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([])>>)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>)<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>,update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 136) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 138) ([])>>),imp(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 136) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 138) ([])>>,variant_2)))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>))<<origin(assignable @ file IFLoopExamples.java @ line 125) ([assignable @ file IFLoopExamples.java @ line 125])>>))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

51864      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
52050      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key 
52050      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.key 
52051      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.2ns 
52052      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54786      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
54825      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].Non-interference contract.0 
54827      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
55644      WARN  Thread-25       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

55734      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(elem-update(exc_B)(null),parallel-upd(elem-update(_x_B)(Z(0(#))),elem-update(heap)(heap_After_LOOP_0))),update-application(parallel-upd(elem-update(heapBefore_LOOP_2)(heap),elem-update(_x_BBefore_LOOP_0)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_1),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 106) ([])>>,anon_heap_LOOP_2<<anonHeapFunction>>))),update-application(elem-update(variant_2)(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 108) ([])>>),imp(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_5 = _x_B == 0;
  }
}\] (equals(b_5,TRUE)),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#69 = false;
    java.lang.Throwable thrownExc#71;
    try {
      {
        if (_x_B == 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#70) {
      exc#69 = true;
      thrownExc#71 = e#70;
    }
  }
}\> (and(imp(equals(exc#69,TRUE),\<{
  try {
    method-frame (
      source=secure_twoWhile(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#71;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>),imp(not(equals(exc#69,TRUE)),and(and(geq(_x_B,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 106) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_2,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_2,o,f)))))),prec(add(_x_B,Z(1(#)))<<origin(decreases @ file IFLoopExamples.java @ line 108) ([])>>,variant_2)))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>))<<origin(<none> (implicit)) ([requires @ file IFLoopExamples.java @ line 87, assignable @ file IFLoopExamples.java @ line 95])>>))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

55737      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
55915      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key 
55916      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.key 
55916      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.1ns 
55917      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58651      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
58693      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].Non-interference contract.0 
58697      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
59121      WARN  Thread-27       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(inInt(z_1_Before_A),inInt(_x_B_Before_A))),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(inInt(z_1_Before_B),inInt(_x_B_Before_B))),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

59201      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 66) ([])>>)),elem-update(exc_B)(null)),elem-update(z_1)(Z(2(#)))),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(z_1Before_LOOP)(z_1)),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(parallel-upd(elem-update(z_1)(z_1_0),elem-update(_x_B)(_x_B_0)),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 75) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#29 = false;
    java.lang.Throwable thrownExc#31;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
          z_1 = z_1 + _x_B;
        }
      }
    } catch (java.lang.Throwable e#30) {
      exc#29 = true;
      thrownExc#31 = e#30;
    }
  }
}\> (and(imp(equals(exc#29,TRUE),\<{
  try {
    method-frame (
      source=loc_secure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#31;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#29,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 75) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(inInt(z_1_Before_A),inInt(_x_B_Before_A))),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(inInt(z_1_Before_B),inInt(_x_B_Before_B))),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

59201      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
59378      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key 
59379      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.key 
59379      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57ns 
59380      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62110      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
62149      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].Non-interference contract.0 
62151      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
62531      WARN  Thread-29       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

62558      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_x_B)(_x_A_Before<<origin(requires @ file IFLoopExamples.java @ line 47) ([])>>)),elem-update(exc_B)(null)),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(_x_BBefore_LOOP)(_x_B)),update-application(parallel-upd(elem-update(_x_B)(_x_B_0),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 55) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(_x_B),imp(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = _x_B > 0;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#25 = false;
    java.lang.Throwable thrownExc#27;
    try {
      {
        if (_x_B > 0) {
          this.low = this.low + 1;
          _x_B = _x_B - 1;
        }
      }
    } catch (java.lang.Throwable e#26) {
      exc#25 = true;
      thrownExc#27 = e#26;
    }
  }
}\> (and(imp(equals(exc#25,TRUE),\<{
  try {
    method-frame (
      source=secure_while(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#27;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#25,TRUE)),and(and(geq(_x_B,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 55) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(_x_B,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

62560      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
62770      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key 
62771      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.key 
62771      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.7ns 
62772      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65554      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.78s 
65593      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].Non-interference contract.0 
65597      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
65699      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65859      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key 
65859      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.key 
65859      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 387.4ns 
65860      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68607      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
68646      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].Non-interference contract.0 
68648      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
69025      WARN  Thread-33       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(and(inInt(_secret_B_A),inInt(y_1_Before_A)),inInt(x_1_Before_A))),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(and(inInt(_secret_B_B),inInt(y_1_Before_B)),inInt(x_1_Before_B))),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

69054      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_secret_B)(secret_B)),elem-update(exc_B)(null)),elem-update(x_1)(Z(0(#)))),elem-update(y_1)(Z(0(#)))),update-application(parallel-upd(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(y_1Before_LOOP)(y_1)),elem-update(x_1Before_LOOP)(x_1)),update-application(parallel-upd(parallel-upd(elem-update(y_1)(y_1_0),elem-update(x_1)(x_1_0)),elem-update(heap)(anon(heap,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 24) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(Z(0(1(#))),y_1)<<origin(decreases @ file IFLoopExamples.java @ line 25) ([])>>),imp(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean b_0 = y_1 < 10;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    boolean exc#31 = false;
    java.lang.Throwable thrownExc#33;
    try {
      {
        if (y_1 < 10) {
          print(x_1);
          if (y_1 == 5) {
            x_1 = _secret_B;
            y_1 = 9;
          }
          x_1++;
          y_1++;
        }
      }
    } catch (java.lang.Throwable e#32) {
      exc#31 = true;
      thrownExc#33 = e#32;
    }
  }
}\> (and(imp(equals(exc#31,TRUE),\<{
  try {
    method-frame (
      source=hammer(int)@loop.IFLoopExamples,
      this=self_B
    ) {
      {
        throw thrownExc#33;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#31,TRUE)),and(and(and(leq(Z(0(#)),y_1),leq(y_1,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,singleton(self_B,loop.IFLoopExamples::$low)<<origin(assignable @ file IFLoopExamples.java @ line 24) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(Z(0(1(#))),y_1)<<origin(decreases @ file IFLoopExamples.java @ line 25) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(and(inInt(_secret_B_A),inInt(y_1_Before_A)),inInt(x_1_Before_A))),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(and(inInt(_secret_B_B),inInt(y_1_Before_B)),inInt(x_1_Before_B))),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

69060      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
1012590    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test LoopInvariants_nomacro 
1012592    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples_nomacro 
347        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
368        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
410        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
556        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
572        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.75ms 
769        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1628       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1628       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1631       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1631       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2837       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8054       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.28s 
8187       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
8218       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 330.6ns 
9174       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
9278       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
9279       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.key 
9279       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 83.8ns 
9282       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12137      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.86s 
12200      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
12203      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
12506      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12612      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.key 
12612      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.key 
12612      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 112.8ns 
12615      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15324      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
15387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].Non-interference contract.0 
15390      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
15492      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15608      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.key 
15608      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.key 
15608      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.9ns 
15609      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18268      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.66s 
18319      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].Non-interference contract.0 
18322      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
18524      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18650      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.key 
18651      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.key 
18651      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.6ns 
18652      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21275      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
21324      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].Non-interference contract.0 
21327      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.4ns 
21532      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21661      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.key 
21661      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.key 
21661      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 359.4ns 
21663      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24259      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
24305      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].Non-interference contract.0 
24311      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
24616      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
24739      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.key 
24740      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.key 
24742      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.32ms 
24744      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27330      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
27374      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].Non-interference contract.0 
27376      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
27578      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27706      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.key 
27707      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.key 
27707      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.1ns 
27708      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
30318      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
30360      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].Non-interference contract.0 
30363      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
30568      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
30689      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.key 
30689      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.key 
30689      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.1ns 
30690      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
33256      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
33301      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.1 
33305      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
34113      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
34284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.key 
34284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.key 
34284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.2ns 
34285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36858      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.57s 
36909      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.0 
36911      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
38843      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
39002      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.key 
39003      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.key 
39003      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68ns 
39004      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41550      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.55s 
41590      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].Non-interference contract.0 
41593      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
41895      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42062      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.key 
42062      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.key 
42062      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.8ns 
42063      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
44603      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
44648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].Non-interference contract.0 
44650      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
44756      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44895      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.key 
44896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.key 
44896      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.1ns 
44896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
47403      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
47442      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].Non-interference contract.0 
47444      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
47646      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47796      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.key 
47796      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.key 
47796      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.5ns 
47797      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
50298      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
50347      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].Non-interference contract.0 
50350      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.6ns 
50552      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
50697      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.key 
50698      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.key 
50698      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.3ns 
50699      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
53189      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
53225      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].Non-interference contract.0 
53228      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
53330      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
53478      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.key 
53478      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.key 
53478      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 88.9ns 
53479      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56007      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
56050      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].Non-interference contract.0 
56052      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
56254      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
56397      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.key 
56398      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.key 
56398      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.2ns 
56399      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58909      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
58945      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].Non-interference contract.0 
58948      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
59049      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59242      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.key 
59242      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.key 
59242      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.3ns 
59244      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61723      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
61770      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].Non-interference contract.0 
61773      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
61876      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
62030      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.key 
62030      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.key 
62030      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.7ns 
62031      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
64508      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
64543      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].Non-interference contract.0 
64546      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
64651      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
64805      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.key 
64806      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.key 
64806      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.3ns 
64806      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
67281      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
67320      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].Non-interference contract.0 
67322      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
67423      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
67580      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.key 
67580      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.key 
67580      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.9ns 
67581      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70043      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
70078      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].Non-interference contract.0 
70080      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
70184      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
70338      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.key 
70338      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.key 
70338      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 68.7ns 
70340      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72793      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
72828      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].Non-interference contract.0 
72830      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
72935      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
73100      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.key 
73101      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.key 
73101      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.1ns 
73101      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
75562      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
75597      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].Non-interference contract.0 
75598      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
75904      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76079      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.key 
76079      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.key 
76080      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.7ns 
76083      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
78545      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
78579      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].Non-interference contract.0 
78581      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
78884      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
79055      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.key 
79055      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.key 
79055      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
79056      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
81515      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
81558      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].Non-interference contract.0 
81560      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
81663      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
81833      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.key 
81833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.key 
81833      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.2ns 
81835      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
84288      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
84334      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].Non-interference contract.0 
84336      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
84639      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
84832      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.key 
84832      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.key 
84832      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.6ns 
84833      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
87293      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
87326      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.1 
87328      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
87530      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
87706      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.key 
87706      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.key 
87706      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.9ns 
87707      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
90184      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
90218      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.0 
90219      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
90423      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
90611      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.key 
90611      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.key 
90611      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.3ns 
90612      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
93053      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
93096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].Non-interference contract.0 
93099      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
93302      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
93491      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.key 
93491      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.key 
93491      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.7ns 
93492      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
95973      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
96008      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].Non-interference contract.0 
96010      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
96113      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
1109086    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples_nomacro 
1109087    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects_nomacro 
337        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
348        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
370        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key 
464        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.key 
485        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.83ms 
692        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1560       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1560       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1561       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1561       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2755       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5537       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
7972       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.28s 
8110       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].Non-interference contract.0 
8194       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 332ns 
9030       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9136       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key 
9137       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.key 
9138       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 439.89ns 
9140       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10177      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12344      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.2s 
12435      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].Non-interference contract.0 
12443      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
13552      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13673      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key 
13674      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.key 
13674      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.5ns 
13675      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
14637      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
16681      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.01s 
16741      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.1 
16745      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
17359      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17479      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key 
17480      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.key 
17480      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.9ns 
17482      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18433      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
20437      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
20503      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.0 
20508      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
21012      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21140      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key 
21140      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.key 
21140      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.2ns 
21141      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22064      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
24052      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
24103      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].Non-interference contract.0 
24106      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
24208      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24322      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key 
24322      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.key 
24322      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.1ns 
24323      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25202      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
27221      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.9s 
27268      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].Non-interference contract.0 
27271      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
31133      WARN  Thread-11       d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),and(or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_A))),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),and(or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_B))),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(equals(b_0_Before_A,FALSE),equals(b_0_Before_B,FALSE)),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

31209      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(heap)(heapAtPre_B<<anonHeapFunction>>),elem-update(_a_B)(a_B)),elem-update(exc_B)(null)),elem-update(i_1)(Z(0(#)))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(i_1Before_LOOP)(i_1)),update-application(parallel-upd(elem-update(i_1)(i_1_0),elem-update(heap)(anon(heap,allFields(_a_B)<<origin(assignable @ file ObjectOrientation.java @ line 111) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(length(_a_B),i_1)<<origin(decreases @ file ObjectOrientation.java @ line 112) ([])>>),imp(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    boolean b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0,TRUE)),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    boolean exc#31 = false;
    java.lang.Throwable thrownExc#33;
    try {
      {
        if (i_1 < _a_B.length) {
          {
            _a_B[i_1] = new Object();
          }
          i_1++;
        }
      }
    } catch (java.lang.Throwable e#32) {
      exc#31 = true;
      thrownExc#33 = e#32;
    }
  }
}\> (and(imp(equals(exc#31,TRUE),\<{
  try {
    method-frame (
      source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
      this=self_B
    ) {
      {
        throw thrownExc#33;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(and(equals(self_B,selfAtPost_B),equals(exc_B,excAtPost_B)),equals(heapAtPost_B,heap))))),imp(not(equals(exc#31,TRUE)),and(and(and(and(leq(Z(0(#)),i_1),leq(i_1,length(_a_B)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B,null)),equals(java.lang.Object[]::exactInstance(_a_B),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,allFields(_a_B)<<origin(assignable @ file ObjectOrientation.java @ line 111) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(length(_a_B),i_1)<<origin(decreases @ file ObjectOrientation.java @ line 112) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),and(or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_A))),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),and(or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_B))),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(equals(b_0_Before_A,FALSE),equals(b_0_Before_B,FALSE)),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

31215      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
31377      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key 
31377      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.key 
31377      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.5ns 
31378      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32274      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
34289      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
34334      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].Non-interference contract.0 
34337      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
34941      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
35202      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key 
35202      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.key 
35202      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 98.1ns 
35203      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36165      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
38177      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
38238      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.1 
38242      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.8ns 
55749      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
55942      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key 
55943      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.key 
55943      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.6ns 
55944      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
56825      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
58768      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
58811      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].Non-interference contract.0 
58813      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
75958      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
76204      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key 
76205      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.key 
76205      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.1ns 
76206      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
77104      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
79046      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
79091      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].Non-interference contract.0 
79093      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
91197      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
91431      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key 
91432      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.key 
91432      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.1ns 
91433      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
92301      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
94227      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.79s 
94269      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.1 
94271      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
102099     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
102288     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key 
102289     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.key 
102289     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 105ns 
102290     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
103173     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
105100     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
105140     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.0 
105142     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
105345     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
105512     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key 
105513     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.key 
105513     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57ns 
105514     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
106394     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
108366     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
108405     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].Non-interference contract.0 
108407     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
108812     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
108971     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key 
108972     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.key 
108972     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 87.2ns 
108973     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
109838     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
111788     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
111828     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].Non-interference contract.0 
111830     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
112132     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
112284     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key 
112284     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.key 
112285     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.7ns 
112285     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
113151     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
115135     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
115174     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].Non-interference contract.0 
115176     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
115981     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
116152     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key 
116152     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.key 
116152     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59ns 
116155     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
117041     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
119011     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.86s 
119050     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].Non-interference contract.0 
119052     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
119153     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
119307     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key 
119307     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.key 
119307     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.8ns 
119308     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
120175     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
122120     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
122168     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].Non-interference contract.0 
122171     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
124703     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1234149    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects_nomacro 
1234152    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting_nomacro 
477        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
487        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
526        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key 
734        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.key 
757        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.96ms 
1024       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1880       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1881       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1884       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1885       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2915       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8440       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.42s 
8607       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].Non-interference contract.0 
8700       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 336.3ns 
11900      WARN  Thread-1        d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),and(or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_A))),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),and(or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_B))),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

11998      WARN  main            d.u.i.k.p.i.ProofSaver    Failed to save java.lang.RuntimeException: Ghost formula update-application(parallel-upd(parallel-upd(parallel-upd(elem-update(_t_B)(t_A),elem-update(exc_B)(null)),elem-update(heap)(heapAfter_untrustedOutput_0)),elem-update(i_7)(Z(0(#)))),update-application(parallel-upd(elem-update(heapBefore_LOOP_0)(heap),elem-update(i_7Before_LOOP)(i_7)),update-application(parallel-upd(elem-update(i_7)(i_7_0),elem-update(heap)(anon(heap,simple_evoting.Environment::$rep(heap)<<origin(assignable @ file Environment.java @ line 106) ([])>>,anon_heap_LOOP_0<<anonHeapFunction>>))),update-application(elem-update(variant_0)(sub(length(_t_B),i_7)<<origin(decreases @ file Environment.java @ line 107) ([])>>),imp(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    boolean b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2,TRUE)),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    boolean exc#48 = false;
    java.lang.Throwable thrownExc#50;
    try {
      {
        if (i_7 < _t_B.length) {
          {
            untrustedOutput(_t_B[i_7]);
          }
          i_7++;
        }
      }
    } catch (java.lang.Throwable e#49) {
      exc#48 = true;
      thrownExc#50 = e#49;
    }
  }
}\> (and(imp(equals(exc#48,TRUE),\<{
  try {
    method-frame (
      source=untrustedOutputMessage(byte[])@simple_evoting.Environment
    ) {
      {
        throw thrownExc#50;
      }
    }
  } catch (java.lang.Throwable e) {
    exc_B = e;
  }
}\> (not(and(equals(exc_B,excAtPost_B),equals(heapAtPost_B,heap))))),imp(not(equals(exc#48,TRUE)),and(and(and(and(leq(Z(0(#)),i_7),leq(i_7,length(_t_B)))<<SC>>,not(equals(_t_B,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>,all{f:Field}(all{o:java.lang.Object}(or(or(elementOf(o,f,simple_evoting.Environment::$rep(heapBefore_LOOP_0)<<origin(assignable @ file Environment.java @ line 106) ([])>>),and(not(equals(o,null)),not(equals(boolean::select(heapBefore_LOOP_0,o,java.lang.Object::<created>),TRUE)))),equals(any::select(heap,o,f),any::select(heapBefore_LOOP_0,o,f)))))),prec(sub(length(_t_B),i_7)<<origin(decreases @ file Environment.java @ line 107) ([])>>,variant_0)))))))))) in sequent []==>[imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),and(or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_A))),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),and(or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_B))),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))] [antec=false]
	at de.uka.ilkd.key.logic.Sequent.formulaNumberInSequent(Sequent.java:278)

11999      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
12189      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key 
12189      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.key 
12189      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 239.5ns 
12191      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15506      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.31s 
15579      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].Non-interference contract.0 
15582      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
15684      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15826      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key 
15826      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.key 
15826      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 69.4ns 
15828      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18942      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.11s 
19011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].Non-interference contract.0 
19014      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.3ns 
19118      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
19237      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key 
19238      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.key 
19238      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100ns 
19240      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22280      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
22354      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].Non-interference contract.0 
22357      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
22459      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
22597      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key 
22598      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.key 
22598      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.2ns 
22599      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25596      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3s 
25663      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.1 
25666      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.6ns 
73337      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
73558      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key 
73559      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.key 
73559      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.1ns 
73562      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
76471      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
76540      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.0 
76542      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11ns 
137139     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
137360     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key 
137360     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.key 
137360     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.6ns 
137361     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
140289     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
140345     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].Non-interference contract.0 
140349     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
144360     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
144533     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key 
144534     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.key 
144534     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.8ns 
144535     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
147460     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
147515     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.1 
147517     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
157941     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
158143     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key 
158143     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.key 
158144     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.4ns 
158145     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
161054     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.91s 
161107     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.0 
161109     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
173503     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1408026    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting_nomacro 
1408028    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyVoting_fullmacro 
361        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
370        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
394        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.m.key 
488        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__insecure_voting()).Non-interference contract.0.m.key 
505        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.96ms 
747        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1572       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1578       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1579       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1580       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2966       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7894       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.15s 
8053       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::insecure_voting()].Non-interference contract.0 
8133       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 325.3ns 
8194       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8508       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8707       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8708       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8918       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8921       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8985       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
8989       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9089       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9090       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9272       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9274       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9368       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9370       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9414       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9416       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9513       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9535       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9604       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9629       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9701       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9728       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
9732       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
33685      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33870      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.m.key 
33871      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__publishVoterParticipation()).Non-interference contract.0.m.key 
33871      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 227.6ns 
33875      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36479      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.6s 
36532      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::publishVoterParticipation()].Non-interference contract.0 
36535      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.5ns 
36535      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
36577      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
36732      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
36929      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.m.key 
36929      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__isValid(int)).Non-interference contract.0.m.key 
36929      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.9ns 
36932      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39465      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
39523      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::isValid(int)].Non-interference contract.0 
39526      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.4ns 
39527      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
39574      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
39857      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39978      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.m.key 
39978      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__sendVote(int)).Non-interference contract.0.m.key 
39978      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.4ns 
39980      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42471      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.49s 
42514      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::sendVote(int)].Non-interference contract.0 
42516      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.2ns 
42517      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
42554      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
42773      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42894      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.m.key 
42895      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__inputVote()).Non-interference contract.0.m.key 
42895      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.3ns 
42896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45347      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.45s 
45390      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::inputVote()].Non-interference contract.0 
45392      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 22.2ns 
45393      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
45428      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
45523      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
45648      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).Non-interference contract.0.m.key 
45648      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyVoting/Voter(Voter__secure_voting()).Non-interference contract.0.m.key 
45648      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.8ns 
45649      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48065      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
48115      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof Voter[Voter::secure_voting()].Non-interference contract.0 
48117      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
48118      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
48152      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48268      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48344      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48345      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48464      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48601      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48603      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
48834      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49008      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49012      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49033      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49177      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
49184      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50224      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50228      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50270      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50274      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50312      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50316      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50348      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50352      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50527      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50531      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50571      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50622      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50708      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50781      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
50782      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51146      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51177      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51180      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51192      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51227      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51230      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51265      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51347      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51351      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51458      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51501      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51505      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51672      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51678      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51735      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51739      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51772      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51775      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51808      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51811      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51836      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51839      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51949      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
51956      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52010      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52013      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52077      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52080      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52115      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52119      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52144      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52147      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52260      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52266      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52385      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52388      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52428      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52432      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52476      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52480      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52512      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52583      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52584      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52622      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52622      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52659      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52660      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52681      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52700      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
52701      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53163      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53165      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53167      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53170      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53336      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53339      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53412      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53414      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53510      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53512      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53581      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53583      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53681      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53683      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53767      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53769      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53865      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53867      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53928      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
53930      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54081      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54084      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54196      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54198      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54963      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
54965      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55347      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55349      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55454      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55456      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55753      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55755      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55915      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
55917      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56044      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56047      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56175      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56177      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56348      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56350      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56497      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
56499      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_Voter 
57526      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1465972    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyVoting_fullmacro 
1465974    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SumExample_fullmacro 
341        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
354        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
375        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.m.key 
478        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/Sum/SumExample(SumExample__getSum()).Non-interference contract.0.m.key 
495        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.79ms 
695        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1698       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1698       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1699       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1702       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3237       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8277       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.58s 
8406       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof SumExample[SumExample::getSum()].Non-interference contract.0 
8464       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 341.2ns 
8555       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8876       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_SumExample 
10554      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1476858    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SumExample_fullmacro 
1476859    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test ToyBanking_fullmacro 
340        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
341        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
379        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
512        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
537        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.93ms 
733        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1700       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1700       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1703       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1703       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3040       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8174       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.44s 
8384       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::getBankAccount(int)].Non-interference contract.0 
8458       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 357.3ns 
8504       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8865       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_UserAccount 
12628      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12794      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
12795      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.UserAccount(banking_example.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
12796      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 259.4ns 
12798      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15678      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.88s 
15762      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.UserAccount[banking_example.UserAccount::tryLogin(int,[C)].Non-interference contract.0 
15765      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.7ns 
15765      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
15818      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_UserAccount 
66431      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66700      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
66701      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
66701      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 87.4ns 
66702      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69409      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
69481      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::depositMoney(int)].Non-interference contract.0 
69484      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
69484      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
69546      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
70062      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
70292      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.m.key 
70292      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getBalance()).Non-interference contract.0.m.key 
70292      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 75.8ns 
70294      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
72965      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.67s 
73019      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getBalance()].Non-interference contract.0 
73025      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
73026      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
73061      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
73179      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
73311      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.m.key 
73311      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.BankAccount(banking_example.BankAccount__getId()).Non-interference contract.0.m.key 
73311      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.7ns 
73313      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
75965      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
76017      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.BankAccount[banking_example.BankAccount::getId()].Non-interference contract.0 
76019      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 39.5ns 
76020      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
76051      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_BankAccount 
76154      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76297      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.m.key 
76297      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example.Bank(banking_example.Bank__login(int,(C)).Non-interference contract.0.m.key 
76298      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.3ns 
76299      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
78915      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
78993      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example.Bank[banking_example.Bank::login(int,[C)].Non-interference contract.0 
78995      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
78995      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
79032      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example_Bank 
80157      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount 
80162      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
80249      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount_EQ 
80256      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount_EQ 
80343      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_15_in_UserAccount_EQ 
80355      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount_EQ 
80368      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
80888      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount_EQ 
80908      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount 
81543      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_9_in_UserAccount 
81546      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_11_in_UserAccount 
82067      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Partial_inv_axiom_for_JML_class_invariant_nr_13_in_UserAccount 
226435     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
226763     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
226764     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__getBankAccount(int)).Non-interference contract.0.m.key 
226764     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 87.6ns 
226765     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
229296     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
229364     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::getBankAccount(int)].Non-interference contract.0 
229366     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
229367     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
229408     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_UserAccount 
231270     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
231666     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
231666     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.UserAccount(banking_example2.UserAccount__tryLogin(int,(C)).Non-interference contract.0.m.key 
231666     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 125.4ns 
231667     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
234174     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
234232     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.UserAccount[banking_example2.UserAccount::tryLogin(int,[C)].Non-interference contract.0 
234234     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
234234     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
234269     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_UserAccount 
246963     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
247211     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
247212     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__depositMoney(int)).Non-interference contract.0.m.key 
247212     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.6ns 
247212     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
249693     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.48s 
249738     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::depositMoney(int)].Non-interference contract.0 
249740     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
249740     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
249770     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
250242     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
250427     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.m.key 
250427     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getBalance()).Non-interference contract.0.m.key 
250428     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.6ns 
250428     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
252952     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.52s 
252994     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getBalance()].Non-interference contract.0 
252996     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
252997     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
253025     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
253122     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
253280     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.m.key 
253281     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/ToyBanking/banking_example2.BankAccount(banking_example2.BankAccount__getId()).Non-interference contract.0.m.key 
253281     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70ns 
253282     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
255866     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
255908     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof banking_example2.BankAccount[banking_example2.BankAccount::getId()].Non-interference contract.0 
255911     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
255911     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
255939     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_banking_example2_BankAccount 
256035     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1733200    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test ToyBanking_fullmacro 
1733201    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test BlockContracts_fullmacro 
305        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
321        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
349        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.m.key 
445        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_5()).Non-interference contract.0.m.key 
476        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.84ms 
695        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1593       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1594       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1595       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1595       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2785       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8211       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.52s 
8342       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_5()].Non-interference contract.0 
8431       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 302.9ns 
8488       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8824       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
9564       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9678       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.m.key 
9679       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_no_return_secure(int)).Non-interference contract.0.m.key 
9679       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 271.7ns 
9681       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12642      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
12712      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_no_return_secure(int)].Non-interference contract.0 
12716      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
12717      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
12774      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
13273      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
13414      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.m.key 
13414      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_insecure(int)).Non-interference contract.0.m.key 
13414      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 86ns 
13417      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
16340      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
16395      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_insecure(int)].Non-interference contract.0 
16398      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
16399      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
16447      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
17574      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17739      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.m.key 
17742      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__while_block_secure(int)).Non-interference contract.0.m.key 
17743      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 94.9ns 
17744      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
20486      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
20534      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::while_block_secure(int)].Non-interference contract.0 
20536      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
20537      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
20577      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
21501      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21683      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.m.key 
21684      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__block_while_secure(int)).Non-interference contract.0.m.key 
21685      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 109.5ns 
21686      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24380      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.69s 
24425      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::block_while_secure(int)].Non-interference contract.0 
24427      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 23.4ns 
24428      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
24465      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
25485      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25677      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.m.key 
25677      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_4(int)).Non-interference contract.0.m.key 
25679      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.24ms 
25680      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28409      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
28451      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_4(int)].Non-interference contract.0 
28453      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
28453      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
28489      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
29907      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
30095      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.m.key 
30096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_3(int)).Non-interference contract.0.m.key 
30096      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 78.5ns 
30096      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32794      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
32848      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_3(int)].Non-interference contract.0 
32851      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.7ns 
32852      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
32893      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
39957      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
40216      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.m.key 
40217      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_3(int)).Non-interference contract.0.m.key 
40217      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.2ns 
40218      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
42841      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
42880      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_3(int)].Non-interference contract.0 
42882      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
42883      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
42916      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
44035      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
44284      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.m.key 
44284      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_2(int)).Non-interference contract.0.m.key 
44284      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.8ns 
44285      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46933      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
46972      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_2(int)].Non-interference contract.0 
46974      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
46974      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
47005      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
48926      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49165      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.m.key 
49166      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_8(int)).Non-interference contract.0.m.key 
49166      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 110.4ns 
49167      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51793      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
51831      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_8(int)].Non-interference contract.0 
51833      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
51833      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
51863      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
52266      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52486      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.m.key 
52487      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_7(int)).Non-interference contract.0.m.key 
52487      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.6ns 
52488      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
55200      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
55238      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_7(int)].Non-interference contract.0 
55240      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
55240      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
55270      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
55566      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
55754      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.m.key 
55754      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_6(int)).Non-interference contract.0.m.key 
55755      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 93.7ns 
55756      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
58388      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
58425      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_6(int)].Non-interference contract.0 
58428      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
58428      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
58456      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
58776      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
59008      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.m.key 
59009      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__insecure_1(int)).Non-interference contract.0.m.key 
59009      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.2ns 
59010      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
61647      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.64s 
61683      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::insecure_1(int)].Non-interference contract.0 
61685      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
61685      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
61727      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
62216      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
62412      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.m.key 
62413      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_4(int)).Non-interference contract.0.m.key 
62413      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 96.2ns 
62414      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65028      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
65081      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_4(int)].Non-interference contract.0 
65083      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
65084      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
65112      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
65505      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65710      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.m.key 
65710      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFBlockExamples(contract.IFBlockExamples__secure_1(int)).Non-interference contract.0.m.key 
65710      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.4ns 
65711      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68336      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.62s 
68381      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFBlockExamples[contract.IFBlockExamples::secure_1(int)].Non-interference contract.0 
68383      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
68384      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
68412      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFBlockExamples 
68889      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69076      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.m.key 
69077      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithoutBlockContract()).Non-interference contract.0.m.key 
69077      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.2ns 
69078      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71689      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
71723      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithoutBlockContract()].Non-interference contract.0 
71725      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
71726      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
71751      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFEfficiencyExamples 
76241      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76529      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.m.key 
76529      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/BlockContracts/contract.IFEfficiencyExamples(contract.IFEfficiencyExamples__mWithBlockContract()).Non-interference contract.0.m.key 
76529      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.2ns 
76530      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
79121      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
79154      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFEfficiencyExamples[contract.IFEfficiencyExamples::mWithBlockContract()].Non-interference contract.0 
79156      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
79156      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
79181      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFEfficiencyExamples 
80590      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1814181    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test BlockContracts_fullmacro 
1814182    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MethodContracts_fullmacro 
374        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
383        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
404        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.m.key 
499        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion_2((I,int)).Non-interference contract.0.m.key 
519        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.76ms 
722        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1577       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1578       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1579       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1579       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3047       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8160       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.44s 
8315       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion_2([I,int)].Non-interference contract.0 
8388       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 352.6ns 
8448       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8805       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9101       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9103       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
9345       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
12081      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12222      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.m.key 
12223      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_recursion(int)).Non-interference contract.0.m.key 
12223      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 247.6ns 
12224      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15279      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.05s 
15348      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_recursion(int)].Non-interference contract.0 
15350      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
15351      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
15416      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15478      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15479      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15534      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
15904      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
16035      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.m.key 
16035      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_catch_exception()).Non-interference contract.0.m.key 
16035      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.78ns 
16039      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18859      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
18917      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_catch_exception()].Non-interference contract.0 
18920      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
18920      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
18967      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
19253      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
19387      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.m.key 
19387      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n6()).Non-interference contract.0.m.key 
19387      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.1ns 
19389      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22092      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.7s 
22151      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n6()].Non-interference contract.0 
22153      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10.9ns 
22154      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
22192      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
22287      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
22415      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.m.key 
22416      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n6()).Non-interference contract.0.m.key 
22416      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 148.4ns 
22417      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25066      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
25121      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n6()].Non-interference contract.0 
25123      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 19.4ns 
25124      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
25159      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25179      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25180      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25206      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
25348      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
25478      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.m.key 
25478      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_array_param((I,int)).Non-interference contract.0.m.key 
25478      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.8ns 
25479      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
28124      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.65s 
28168      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_array_param([I,int)].Non-interference contract.0 
28170      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
28171      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
28215      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28270      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28271      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
28311      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
29589      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
29735      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.m.key 
29735      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignment_0_n9()).Non-interference contract.0.m.key 
29735      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.6ns 
29736      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32331      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
32378      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignment_0_n9()].Non-interference contract.0 
32381      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.1ns 
32381      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
32423      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
32473      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
32474      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
32484      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
32607      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
32774      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.m.key 
32776      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_if_high_n5_n1()).Non-interference contract.0.m.key 
32776      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.9ns 
32777      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
35382      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.61s 
35423      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_if_high_n5_n1()].Non-interference contract.0 
35426      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
35426      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
35458      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35495      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35495      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35536      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35536      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35555      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35556      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35575      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35580      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
35589      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
36126      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
36280      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.m.key 
36280      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n5(int)).Non-interference contract.0.m.key 
36280      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.6ns 
36282      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
38870      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
38906      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n5(int)].Non-interference contract.0 
38908      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
38909      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
38951      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
39035      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
39203      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.m.key 
39204      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n5_n1()).Non-interference contract.0.m.key 
39204      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.8ns 
39205      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
41784      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.58s 
41820      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n5_n1()].Non-interference contract.0 
41822      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
41822      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
41850      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
41939      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
41939      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
41960      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
41961      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
41999      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42000      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42018      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42019      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42036      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42063      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42080      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42084      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
42614      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
42794      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.m.key 
42794      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_if_high_n1()).Non-interference contract.0.m.key 
42794      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 75.8ns 
42796      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
45388      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.59s 
45440      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_if_high_n1()].Non-interference contract.0 
45442      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
45443      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
45471      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45523      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45523      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45581      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45582      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45597      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45607      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
45929      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46088      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.m.key 
46088      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_n5()).Non-interference contract.0.m.key 
46088      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.5ns 
46089      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48615      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.53s 
48654      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_n5()].Non-interference contract.0 
48655      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
48656      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
48684      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
48715      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
48715      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
48725      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
48841      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
49068      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.m.key 
49068      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n4()).Non-interference contract.0.m.key 
49068      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.8ns 
49069      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51571      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
51605      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n4()].Non-interference contract.0 
51607      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
51607      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
51636      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
51746      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
51912      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.m.key 
51912      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n3()).Non-interference contract.0.m.key 
51912      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.8ns 
51913      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54408      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
54450      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n3()].Non-interference contract.0 
54452      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
54453      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
54479      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
54537      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54686      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.m.key 
54686      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n3_precond_n4()).Non-interference contract.0.m.key 
54687      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.4ns 
54687      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57202      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
57239      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n3_precond_n4()].Non-interference contract.0 
57241      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
57241      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
57267      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57289      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57290      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57308      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57309      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57325      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57327      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
57533      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57705      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.m.key 
57706      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__insecure_assignment_n2()).Non-interference contract.0.m.key 
57706      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 101.6ns 
57707      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60174      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
60208      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::insecure_assignment_n2()].Non-interference contract.0 
60210      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
60210      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
60235      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
60262      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
60262      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
60271      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
60518      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
60671      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.m.key 
60671      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_assignments_n2()).Non-interference contract.0.m.key 
60672      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 82.5ns 
60672      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
63211      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.54s 
63248      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_assignments_n2()].Non-interference contract.0 
63250      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.5ns 
63250      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
63278      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
63324      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
63324      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
63338      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
63543      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63834      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.m.key 
63835      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n2()).Non-interference contract.0.m.key 
63835      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
63836      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
66343      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
66375      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n2()].Non-interference contract.0 
66377      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
66377      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
66403      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
66485      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
66691      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.m.key 
66691      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__n1()).Non-interference contract.0.m.key 
66691      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.7ns 
66692      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
69153      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.46s 
69185      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::n1()].Non-interference contract.0 
69187      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
69188      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
69214      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
69292      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
69447      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.m.key 
69447      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MethodContracts/contract.IFMethodContract(contract.IFMethodContract__secure_sequential_n1_n2()).Non-interference contract.0.m.key 
69447      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 80.2ns 
69448      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
71919      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
71952      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof contract.IFMethodContract[contract.IFMethodContract::secure_sequential_n1_n2()].Non-interference contract.0 
71954      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
71954      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
71979      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
71995      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
71995      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
72011      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
72012      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
72023      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
72025      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_contract_IFMethodContract 
72176      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
1886692    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MethodContracts_fullmacro 
1886693    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test InformationFlow_fullmacro 
368        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
388        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
409        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.m.key 
513        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_while_3(int)).Non-interference contract.0.m.key 
538        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.85ms 
746        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1671       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1672       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1673       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1673       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
3013       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8424       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.68s 
8612       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_while_3(int)].Non-interference contract.0 
8673       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 352.5ns 
8733       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9051       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
13563      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
13765      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.m.key 
13771      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_2(int)).Non-interference contract.0.m.key 
13771      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 256.6ns 
13772      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17074      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.3s 
17139      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_2(int)].Non-interference contract.0 
17143      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
17145      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
17194      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
18470      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18666      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.m.key 
18667      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while_4(int)).Non-interference contract.0.m.key 
18667      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 82.5ns 
18668      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21707      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.04s 
21752      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while_4(int)].Non-interference contract.0 
21755      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
21755      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
21794      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
22934      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
23096      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.m.key 
23097      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile2(int)).Non-interference contract.0.m.key 
23097      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 116.5ns 
23098      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
26203      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.1s 
26250      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile2(int)].Non-interference contract.0 
26252      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
26253      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
26291      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
27316      WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_1_A)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 386) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap)))))),imp(equals(b_1_Before_A,FALSE),and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_1_B)),geq(_x_Before_1_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap)))))),imp(equals(b_1_Before_B,FALSE),and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(b_1_Before_A,b_1_Before_B)),and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

28761      WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_2_A)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 396) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_2_B)),geq(_x_Before_2_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

245933     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
246179     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
246180     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
246180     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 66.9ns 
246181     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
249136     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
249176     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_doubleNestedWhile(int)].Non-interference contract.0 
249178     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
249178     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
249211     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
250176     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_1_A)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 345) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap)))))),imp(equals(b_1_Before_A,FALSE),and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_1_B)),geq(_x_Before_1_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap)))))),imp(equals(b_1_Before_B,FALSE),and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

251280     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_2_A)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 355) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_2_B)),geq(_x_Before_2_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

253347     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
253615     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
253615     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_doubleNestedWhile(int)).Non-interference contract.0.m.key 
253615     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.1ns 
253616     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
256533     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
256570     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_doubleNestedWhile(int)].Non-interference contract.0 
256572     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
256572     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
256602     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
257535     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_1_A)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 304) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap)))))),imp(equals(b_1_Before_A,FALSE),and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_1_B)),geq(_x_Before_1_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
    while (_x > 0) {
      this.low = this.low + 1;
      _x = _x - 1;
    }
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap)))))),imp(equals(b_1_Before_B,FALSE),and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

258599     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_2_A)),geq(_x_Before_2_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 314) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_2_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(equals(self_After_LOOP_2_A,self_A_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(_x_After_2_A,_x)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_2_B)),geq(_x_Before_2_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_2_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(equals(self_After_LOOP_2_B,self_B_2),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_2 = _x > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(_x_After_2_B,_x)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_2_A,_x_Before_2_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_After_LOOP_2_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_After_LOOP_2_B,loop.IFLoopExamples::$low)),equals(_x_After_2_A,_x_After_2_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

260260     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
260519     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.m.key 
260519     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedTwoWhile(int)).Non-interference contract.0.m.key 
260519     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.4ns 
260520     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
263477     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.96s 
263520     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedTwoWhile(int)].Non-interference contract.0 
263522     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
263523     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
263557     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
265181     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_3_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_3_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_3_A<<anonHeapFunction>>)),not(equals(self_A_4,null))),equals(boolean::select(heap,self_A_4,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_4),TRUE)),inInt(_x_Before_3_A)),geq(_x_Before_3_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 274) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_4),elem-update(_x)(_x_Before_3_A)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (and(equals(b_3,b_3_Before_A),imp(equals(b_3_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_3_A,self_A_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_A,b_3))),equals(_x_After_3_A,_x)),equals(heap_After_LOOP_3_A,heap)))))),imp(equals(b_3_Before_A,FALSE),and(and(and(equals(self_After_LOOP_3_A,self_A_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_A,b_3))),equals(_x_After_3_A,_x)),equals(heap_After_LOOP_3_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_3_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_3_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_3_B<<anonHeapFunction>>)),not(equals(self_B_4,null))),equals(boolean::select(heap,self_B_4,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_4),TRUE)),inInt(_x_Before_3_B)),geq(_x_Before_3_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_4),elem-update(_x)(_x_Before_3_B)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (and(equals(b_3,b_3_Before_B),imp(equals(b_3_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_3_B,self_B_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_B,b_3))),equals(_x_After_3_B,_x)),equals(heap_After_LOOP_3_B,heap)))))),imp(equals(b_3_Before_B,FALSE),and(and(and(equals(self_After_LOOP_3_B,self_B_4),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_3 = _x > 0;
  }
}\] (equals(b_3_After_B,b_3))),equals(_x_After_3_B,_x)),equals(heap_After_LOOP_3_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_3_A<<anonHeapFunction>>,self_A_4,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_3_B<<anonHeapFunction>>,self_B_4,loop.IFLoopExamples::$low)),equals(_x_Before_3_A,_x_Before_3_B)),equals(b_3_Before_A,b_3_Before_B)),and(and(equals(int::select(heap_After_LOOP_3_A,self_After_LOOP_3_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_3_B,self_After_LOOP_3_B,loop.IFLoopExamples::$low)),equals(_x_After_3_A,_x_After_3_B)),equals(b_3_After_A,b_3_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

267175     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
267397     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.m.key 
267398     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_nestedWhile(int)).Non-interference contract.0.m.key 
267398     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 108.5ns 
267399     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
270367     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
270423     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_nestedWhile(int)].Non-interference contract.0 
270424     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.4ns 
270425     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
270453     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
271340     WARN  main            d.u.i.k.p.i.ApplyStrategy doWork exception java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_1_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_A<<anonHeapFunction>>)),not(equals(self_A_2,null))),equals(boolean::select(heap,self_A_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_2),TRUE)),inInt(_x_Before_1_A)),geq(_x_Before_1_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 233) ([])>>),update-application(parallel-upd(elem-update(self)(self_A_2),elem-update(_x)(_x_Before_1_A)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_A),imp(equals(b_1_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap)))))),imp(equals(b_1_Before_A,FALSE),and(and(and(equals(self_After_LOOP_1_A,self_A_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_A,b_1))),equals(_x_After_1_A,_x)),equals(heap_After_LOOP_1_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_1_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_1_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_1_B<<anonHeapFunction>>)),not(equals(self_B_2,null))),equals(boolean::select(heap,self_B_2,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_2),TRUE)),inInt(_x_Before_1_B)),geq(_x_Before_1_B,Z(0(#)))),update-application(parallel-upd(elem-update(self)(self_B_2),elem-update(_x)(_x_Before_1_B)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (and(equals(b_1,b_1_Before_B),imp(equals(b_1_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    this.low = this.low + 1;
    _x = _x - 1;
  }
}\> (and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap)))))),imp(equals(b_1_Before_B,FALSE),and(and(and(equals(self_After_LOOP_1_B,self_B_2),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self
  ) {
    b_1 = _x > 0;
  }
}\] (equals(b_1_After_B,b_1))),equals(_x_After_1_B,_x)),equals(heap_After_LOOP_1_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_1_A<<anonHeapFunction>>,self_A_2,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_1_B<<anonHeapFunction>>,self_B_2,loop.IFLoopExamples::$low)),equals(_x_Before_1_A,_x_Before_1_B)),equals(b_1_Before_A,b_1_Before_B)),and(and(equals(int::select(heap_After_LOOP_1_A,self_After_LOOP_1_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_1_B,self_After_LOOP_1_B,loop.IFLoopExamples::$low)),equals(_x_After_1_A,_x_After_1_B)),equals(b_1_After_A,b_1_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)

272571     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
272781     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.m.key 
272781     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while(int)).Non-interference contract.0.m.key 
272781     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.8ns 
272782     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
275750     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
275783     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while(int)].Non-interference contract.0 
275785     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
275786     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
275812     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
278271     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
278457     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.m.key 
278457     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__notSecure_while_wrongInv(int)).Non-interference contract.0.m.key 
278457     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 70.1ns 
278458     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
281382     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
281422     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::notSecure_while_wrongInv(int)].Non-interference contract.0 
281424     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
281424     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
281451     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
283043     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
283255     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.m.key 
283255     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile(int)).Non-interference contract.0.m.key 
283255     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71ns 
283256     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
286236     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.98s 
286272     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile(int)].Non-interference contract.0 
286274     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
286274     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
286304     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
287923     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
288149     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.m.key 
288149     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__insecure_twoWhile_2(int)).Non-interference contract.0.m.key 
288149     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 63.7ns 
288152     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
291100     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.95s 
291132     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::insecure_twoWhile_2(int)].Non-interference contract.0 
291134     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
291135     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
291161     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
293364     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
293581     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.m.key 
293581     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_twoWhile(int)).Non-interference contract.0.m.key 
293581     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.3ns 
293583     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
296513     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
296545     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_twoWhile(int)].Non-interference contract.0 
296547     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
296547     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
296573     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
297974     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
298204     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.m.key 
298204     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__loc_secure_while(int)).Non-interference contract.0.m.key 
298204     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.5ns 
298205     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
301105     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.9s 
301137     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::loc_secure_while(int)].Non-interference contract.0 
301139     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
301139     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
301182     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
302050     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
302237     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.m.key 
302237     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__secure_while(int)).Non-interference contract.0.m.key 
302237     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62ns 
302238     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
305170     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
305202     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::secure_while(int)].Non-interference contract.0 
305204     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
305205     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
305245     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
305914     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
306090     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.m.key 
306090     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__print(int)).Non-interference contract.0.m.key 
306090     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 95.9ns 
306091     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
309020     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.93s 
309053     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::print(int)].Non-interference contract.0 
309060     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
309061     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
309150     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
309313     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.m.key 
309313     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/LoopInvariants/loop.IFLoopExamples(loop.IFLoopExamples__hammer(int)).Non-interference contract.0.m.key 
309313     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.4ns 
309314     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
312232     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.92s 
312267     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof loop.IFLoopExamples[loop.IFLoopExamples::hammer(int)].Non-interference contract.0 
312269     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.9ns 
312270     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
312297     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_loop_IFLoopExamples 
313666     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2200710    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test InformationFlow_fullmacro 
2200711    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test MiniExamples_fullmacro 
388        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
394        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
425        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
521        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
546        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.7ms 
750        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1513       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1513       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2845       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
7894       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.14s 
8075       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::insecure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
8129       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 303.8ns 
8191       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8610       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_AliasingExamples 
9420       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
9535       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
9537       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.AliasingExamples(mini.AliasingExamples__secure_1(mini.AliasingExamples,mini.AliasingExamples,int)).Non-interference contract.0.m.key 
9537       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 140.8ns 
9540       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
12389      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
12459      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.AliasingExamples[mini.AliasingExamples::secure_1(mini.AliasingExamples,mini.AliasingExamples,int)].Non-interference contract.0 
12461      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
12462      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
12541      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_AliasingExamples 
12747      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
12895      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.m.key 
12896      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_6()).Non-interference contract.0.m.key 
12896      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.1ns 
12897      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15524      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.63s 
15576      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_6()].Non-interference contract.0 
15579      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 10ns 
15579      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
15622      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
15693      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
15813      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.m.key 
15813      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_5()).Non-interference contract.0.m.key 
15813      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 100.1ns 
15816      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18378      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.56s 
18433      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_5()].Non-interference contract.0 
18435      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
18436      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
18476      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
18607      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
18752      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.m.key 
18752      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_4()).Non-interference contract.0.m.key 
18752      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.8ns 
18754      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
21256      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.5s 
21302      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_4()].Non-interference contract.0 
21304      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 23.1ns 
21305      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
21342      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
21451      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21619      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.m.key 
21620      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_3()).Non-interference contract.0.m.key 
21620      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.5ns 
21620      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24127      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
24170      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_3()].Non-interference contract.0 
24172      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.8ns 
24173      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
24208      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
24491      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
24611      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.m.key 
24611      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_2()).Non-interference contract.0.m.key 
24611      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 84.1ns 
24612      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27083      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.47s 
27126      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_2()].Non-interference contract.0 
27128      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.4ns 
27129      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
27163      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
27321      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
27506      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.m.key 
27507      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamplesLecture(mini.MiniExamplesLecture__m_1()).Non-interference contract.0.m.key 
27507      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.8ns 
27508      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
30013      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.51s 
30054      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamplesLecture[mini.MiniExamplesLecture::m_1()].Non-interference contract.0 
30056      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.7ns 
30057      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
30089      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamplesLecture 
30209      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
30335      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.m.key 
30336      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.1.m.key 
30336      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.6ns 
30336      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
32775      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
32818      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.1 
32820      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.7ns 
32821      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
32853      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_DifferenceSeqLocset 
33415      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
33605      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.m.key 
33606      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.DifferenceSeqLocset(mini.DifferenceSeqLocset__m()).Non-interference contract.0.m.key 
33606      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 67.5ns 
33607      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
36036      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
36076      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.DifferenceSeqLocset[mini.DifferenceSeqLocset::m()].Non-interference contract.0 
36078      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
36079      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
36109      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_DifferenceSeqLocset 
37930      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
38106      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.m.key 
38106      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_8()).Non-interference contract.0.m.key 
38106      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 57.1ns 
38107      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
40547      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
40585      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_8()].Non-interference contract.0 
40587      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.2ns 
40587      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
40619      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
40825      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
41010      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.m.key 
41010      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_parameter(int)).Non-interference contract.0.m.key 
41010      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.3ns 
41011      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
43452      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.44s 
43494      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_parameter(int)].Non-interference contract.0 
43496      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.5ns 
43497      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
43529      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
43640      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
43787      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.m.key 
43787      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_7()).Non-interference contract.0.m.key 
43787      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.9ns 
43788      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
46217      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
46254      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_7()].Non-interference contract.0 
46256      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
46256      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
46284      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
46494      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
46659      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.m.key 
46659      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_2()).Non-interference contract.0.m.key 
46659      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.4ns 
46661      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
49078      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.42s 
49113      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_2()].Non-interference contract.0 
49115      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
49115      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
49142      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
49338      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
49497      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.m.key 
49497      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_6()).Non-interference contract.0.m.key 
49497      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.9ns 
49498      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51911      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
51946      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_6()].Non-interference contract.0 
51948      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
51949      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
51976      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
52027      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
52239      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.m.key 
52240      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_5()).Non-interference contract.0.m.key 
52240      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102.1ns 
52241      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
54654      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
54690      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_5()].Non-interference contract.0 
54691      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
54692      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
54718      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
54817      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
54979      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.m.key 
54979      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_4()).Non-interference contract.0.m.key 
54979      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.5ns 
54980      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
57392      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.41s 
57426      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_4()].Non-interference contract.0 
57428      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12ns 
57428      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
57454      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
57561      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
57724      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.m.key 
57724      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_3()).Non-interference contract.0.m.key 
57724      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.3ns 
57725      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
60123      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.4s 
60157      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_3()].Non-interference contract.0 
60158      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.6ns 
60159      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
60185      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
60275      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
60445      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.m.key 
60445      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_2()).Non-interference contract.0.m.key 
60445      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 94.6ns 
60446      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
62845      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.4s 
62886      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_2()].Non-interference contract.0 
62888      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
62889      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
62919      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
63012      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
63179      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.m.key 
63179      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p2_1()).Non-interference contract.0.m.key 
63179      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 51.9ns 
63181      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
65579      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.4s 
65614      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p2_1()].Non-interference contract.0 
65616      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
65617      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
65643      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
65700      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
65867      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.m.key 
65868      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p2_1()).Non-interference contract.0.m.key 
65868      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 88.3ns 
65868      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
68246      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
68280      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p2_1()].Non-interference contract.0 
68282      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14ns 
68282      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
68307      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
68409      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
68566      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.m.key 
68567      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_6()).Non-interference contract.0.m.key 
68567      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 93.5ns 
68568      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
70998      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.43s 
71031      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_6()].Non-interference contract.0 
71033      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
71033      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
71059      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
71141      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
71329      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.m.key 
71330      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_5()).Non-interference contract.0.m.key 
71330      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 92.2ns 
71331      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
73709      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
73743      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_5()].Non-interference contract.0 
73744      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
73745      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
73770      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
73979      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
74165      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.m.key 
74165      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_4()).Non-interference contract.0.m.key 
74165      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 113.1ns 
74166      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
76529      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
76565      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_4()].Non-interference contract.0 
76567      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15.6ns 
76567      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
76607      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
76808      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
76997      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.m.key 
76997      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_3()).Non-interference contract.0.m.key 
76997      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.8ns 
76999      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
79365      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.37s 
79398      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_3()].Non-interference contract.0 
79400      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.3ns 
79400      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
79425      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
79505      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
79691      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.m.key 
79691      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_2()).Non-interference contract.0.m.key 
79691      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 53.7ns 
79692      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
82085      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.39s 
82117      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_2()].Non-interference contract.0 
82119      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 16.9ns 
82120      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
82158      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
82332      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
82551      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.m.key 
82551      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.1.m.key 
82551      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 51.6ns 
82552      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
84915      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
84948      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.1 
84950      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
84950      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
84975      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
85107      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
85338      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.m.key 
85339      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__secure_p1_1()).Non-interference contract.0.m.key 
85339      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 84.5ns 
85340      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
87718      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.38s 
87752      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::secure_p1_1()].Non-interference contract.0 
87754      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.8ns 
87754      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
87780      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
87924      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
88126      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.m.key 
88126      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_2()).Non-interference contract.0.m.key 
88126      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 51.8ns 
88128      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
90491      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
90524      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_2()].Non-interference contract.0 
90525      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
90526      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
90556      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
90779      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
90980      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.m.key 
90980      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/MiniExamples/mini.MiniExamples(mini.MiniExamples__insecure_p1_1()).Non-interference contract.0.m.key 
90980      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 50ns 
90982      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
93339      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.36s 
93371      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof mini.MiniExamples[mini.MiniExamples::insecure_p1_1()].Non-interference contract.0 
93373      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
93374      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
93419      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_mini_MiniExamples 
93503      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
2294580    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test MiniExamples_fullmacro 
2294581    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test NewObjects_fullmacro 
347        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
356        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
395        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.m.key 
512        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee3(object.AmtoftBanerjee3__m()).Non-interference contract.0.m.key 
529        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 1.75ms 
736        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1602       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1603       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1605       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1605       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2906       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
5906       DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
8513       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.78s 
8658       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee3[object.AmtoftBanerjee3::m()].Non-interference contract.0 
8719       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 309.6ns 
8751       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
8987       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee3 
9621       INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
9728       INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.m.key 
9729       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_2()).Non-interference contract.0.m.key 
9729       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 249.3ns 
9733       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
10739      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
12821      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.09s 
12889      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_2()].Non-interference contract.0 
12895      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
12896      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
13462      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
13464      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
13572      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
14088      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14244      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.m.key 
14244      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.1.m.key 
14244      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.3ns 
14247      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
15197      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
17216      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.97s 
17272      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.1 
17275      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.2ns 
17276      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
17483      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
17484      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
17512      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
17766      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
17911      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.m.key 
17912      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__m_1()).Non-interference contract.0.m.key 
17912      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 97.4ns 
17913      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
18802      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
20811      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.9s 
20859      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::m_1()].Non-interference contract.0 
20861      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.3ns 
20862      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
21030      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
21031      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
21058      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
21252      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
21412      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.m.key 
21413      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee(object.AmtoftBanerjee__getQ()).Non-interference contract.0.m.key 
21413      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102.5ns 
21414      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
22317      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
24254      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.84s 
24301      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee[object.AmtoftBanerjee::getQ()].Non-interference contract.0 
24303      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 22.7ns 
24303      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
24339      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee 
24443      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24566      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).Non-interference contract.0.m.key 
24566      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.Naumann(object.Naumann__Pair_m(int,int)).Non-interference contract.0.m.key 
24567      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 102.5ns 
24567      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
25447      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
27414      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.85s 
27466      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.Naumann[object.Naumann::Pair_m(int,int)].Non-interference contract.0 
27469      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
27469      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
38203      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
38435      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.m.key 
38436      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_while_i((Ljava.lang.Object)).Non-interference contract.0.m.key 
38436      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.4ns 
38437      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
39329      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
41245      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.81s 
41308      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_while_i([Ljava.lang.Object)].Non-interference contract.0 
41312      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.8ns 
41312      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
41362      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
47329      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
47566      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.m.key 
47566      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_method_call()).Non-interference contract.0.m.key 
47566      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 56.8ns 
47567      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
48432      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
50308      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
50349      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_method_call()].Non-interference contract.0 
50350      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
50351      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
50380      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
50413      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
50436      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
50478      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
50794      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
50995      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.m.key 
50996      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.1.m.key 
50996      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 96.3ns 
50997      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
51859      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
53786      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.79s 
53835      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.1 
53837      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.5ns 
53838      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
53865      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
82723      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
82949      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.0.m.key 
82949      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__if_two_object_creation_next()).Non-interference contract.0.m.key 
82949      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 60.6ns 
82951      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
83808      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
85700      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
85738      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::if_two_object_creation_next()].Non-interference contract.0 
85740      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.1ns 
85740      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
85771      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
97792      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
98099      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).Non-interference contract.0.m.key 
98099      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_if_two_object_creation()).Non-interference contract.0.m.key 
98099      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 73.2ns 
98100      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
98955      DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
100849     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
100888     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_if_two_object_creation()].Non-interference contract.0 
100890     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
100890     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
100917     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
112723     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
112958     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.m.key 
112958     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_two_object_creation()).Non-interference contract.0.m.key 
112958     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 59.8ns 
112959     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
113805     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
115677     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
115713     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_two_object_creation()].Non-interference contract.0 
115715     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
115715     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
115751     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
144159     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
144411     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.m.key 
144411     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_two_object_creation()).Non-interference contract.0.m.key 
144411     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 58.5ns 
144412     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
145283     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
147183     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.77s 
147219     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_two_object_creation()].Non-interference contract.0 
147221     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.6ns 
147221     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
147246     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
156791     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
157054     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.m.key 
157054     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.1.m.key 
157054     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.9ns 
157055     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
157901     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
159782     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
159817     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.1 
159819     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
159820     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
159844     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
168041     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
168244     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.m.key 
168244     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__insecure_object_assignment()).Non-interference contract.0.m.key 
168244     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 71.7ns 
168245     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
169092     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
170951     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.71s 
170985     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::insecure_object_assignment()].Non-interference contract.0 
170987     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
170988     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
171012     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
171216     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
171405     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.m.key 
171406     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_3()).Non-interference contract.0.m.key 
171406     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 79.8ns 
171407     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
172250     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
174144     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.74s 
174180     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_3()].Non-interference contract.0 
174181     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.3ns 
174182     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
174207     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
174600     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
174797     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.m.key 
174797     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation_2()).Non-interference contract.0.m.key 
174797     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 65.1ns 
174798     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
175674     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
177618     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.82s 
177653     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation_2()].Non-interference contract.0 
177655     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13ns 
177655     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
177681     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
177948     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
178130     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.m.key 
178131     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.ObjectOrientation(object.ObjectOrientation__secure_object_creation()).Non-interference contract.0.m.key 
178131     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 76.9ns 
178132     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
178979     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
180855     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.72s 
180890     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.ObjectOrientation[object.ObjectOrientation::secure_object_creation()].Non-interference contract.0 
180891     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.1ns 
180892     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
180918     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_ObjectOrientation 
181255     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
181446     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.m.key 
181446     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__expensive(int)).Non-interference contract.0.m.key 
181447     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 103.6ns 
181447     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
182289     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
184173     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.73s 
184210     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::expensive(int)].Non-interference contract.0 
184212     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.4ns 
184213     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
184292     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
184464     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.m.key 
184464     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/NewObjects/object.AmtoftBanerjee2(object.AmtoftBanerjee2__cexp(int)).Non-interference contract.0.m.key 
184464     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 52.8ns 
184465     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
185341     DEBUG main            d.u.i.k.j.r.ClassPreparationMethodBuilder clPrepBuilder: Inner Class detected. Reject building class initialisation methods. 
187219     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 2.75s 
187266     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof object.AmtoftBanerjee2[object.AmtoftBanerjee2::cexp(int)].Non-interference contract.0 
187269     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 15ns 
187269     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
187300     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_object_AmtoftBanerjee2 
189434     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2484409    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test NewObjects_fullmacro 
2484409    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Running test SimpleEvoting_fullmacro 
322        INFO  Timeout watchdog d.u.i.k.p.r.p.ForkedTestFileRunner Timeout watcher launched (1000 secs.) 
330        WARN  main            d.u.i.k.s.ProofSettings   The settings in /home/runner/.key/proof-settings.props are *not* read. 
350        INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.m.key 
447        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutputMessage((B)).Non-interference contract.0.m.key 
473        DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 2.62ms 
681        INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1512       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1514       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
1514       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for Meta 
2685       DEBUG main            d.u.i.k.j.TypeConverter   No LDT found for JavaBigintExpression 
8622       DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 7.94s 
8823       INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutputMessage([B)].Non-interference contract.0 
8924       DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 305.6ns 
8983       DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
9532       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
9658       DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
10470      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
11027      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
12349      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
14401      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
14539      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).Non-interference contract.0.m.key 
14539      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInputMessage()).Non-interference contract.0.m.key 
14540      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 243.5ns 
14541      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
17976      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.44s 
18057      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInputMessage()].Non-interference contract.0 
18060      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.5ns 
18060      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
18130      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
18338      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
20511      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
20685      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.m.key 
20686      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedOutput(int)).Non-interference contract.0.m.key 
20686      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 106.2ns 
20687      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
24050      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.36s 
24121      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedOutput(int)].Non-interference contract.0 
24123      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.6ns 
24124      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
24194      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
24352      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.m.key 
24352      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput(int)).Non-interference contract.0.m.key 
24352      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.9ns 
24354      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
27662      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.31s 
27729      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput(int)].Non-interference contract.0 
27736      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.9ns 
27737      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
27860      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
27988      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.m.key 
27990      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Environment(simple_evoting.Environment__untrustedInput()).Non-interference contract.0.m.key 
27990      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 117.6ns 
27991      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
31289      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.3s 
31357      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Environment[simple_evoting.Environment::untrustedInput()].Non-interference contract.0 
31359      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 11.8ns 
31359      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
31434      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: open goal(s) 
31601      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.m.key 
31602      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.1.m.key 
31602      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 62.9ns 
31602      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
34910      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.31s 
34968      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.1 
34970      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.9ns 
34971      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
35015      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
35023      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
35064      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
35297      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
35379      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
35410      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
35419      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
36522      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
36829      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36896      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36918      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
36952      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36971      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
36987      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37077      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37107      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37140      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37229      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37307      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37334      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37359      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37420      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37492      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37520      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37550      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37625      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37649      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37706      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37783      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37815      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
37881      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37908      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
37932      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38034      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38126      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38156      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38226      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38250      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38320      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38349      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
38375      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
38900      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
40110      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40154      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40195      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40233      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40272      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
40313      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40355      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40395      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40433      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40470      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40510      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
40834      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
40921      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41003      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41115      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41192      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41263      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41328      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41394      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41472      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
41560      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
42394      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
42463      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
42637      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
57656      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
57746      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
57792      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
57819      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
80079      INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
80413      INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.m.key 
80413      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMT(simple_evoting.SMT__send(simple_evoting.Message,int,simple_evoting.Server)).Non-interference contract.0.m.key 
80413      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 64.9ns 
80414      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
83601      DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.19s 
83655      INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMT[simple_evoting.SMT::send(simple_evoting.Message,int,simple_evoting.Server)].Non-interference contract.0 
83656      DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.2ns 
83657      DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
83706      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
83713      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
83773      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
83986      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
84025      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84089      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
84123      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85173      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85246      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85263      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85416      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85431      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85664      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85713      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85759      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85786      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85821      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85838      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85868      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
85946      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
85974      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86046      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86071      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86140      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86195      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86218      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86337      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86366      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86428      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86451      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86480      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86551      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86625      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86649      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86680      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86755      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86811      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86837      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
86913      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86944      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
86975      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
87004      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
87055      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
87496      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
87537      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
88883      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
88968      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89009      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89048      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89089      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89127      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89168      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89252      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89294      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89331      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89372      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
89695      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
89782      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
89865      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
89947      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90039      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90106      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90224      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90292      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90359      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
90427      DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
106610     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
106671     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
106693     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
106762     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
131225     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
131522     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).Non-interference contract.0.m.key 
131522     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.SMTEnv(simple_evoting.SMTEnv__send(int,int,int,simple_evoting.Server,int)).Non-interference contract.0.m.key 
131522     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.6ns 
131523     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
134738     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.22s 
134791     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.SMTEnv[simple_evoting.SMTEnv::send(int,int,int,simple_evoting.Server,int)].Non-interference contract.0 
134793     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.4ns 
134794     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
134838     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
134851     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
134866     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
134881     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
134898     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
134959     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
136159     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
136426     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.m.key 
136426     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.NetworkClient(simple_evoting.NetworkClient__send((B,simple_evoting.Server,int)).Non-interference contract.0.m.key 
136426     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 55.5ns 
136427     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
139605     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.18s 
139663     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.NetworkClient[simple_evoting.NetworkClient::send([B,simple_evoting.Server,int)].Non-interference contract.0 
139666     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 13.3ns 
139666     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
139715     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
139735     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
139751     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
140714     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
140900     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.m.key 
140900     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.1.m.key 
140900     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 61.7ns 
140901     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
144089     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.19s 
144138     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.1 
144140     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 14.2ns 
144141     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
144176     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Voter 
144179     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
144721     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
144863     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144911     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
144952     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
147345     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147360     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147380     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147388     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147402     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147424     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147431     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147446     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147453     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147461     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147482     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147496     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147504     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
147510     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
147850     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
148086     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
148289     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
148310     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
148415     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
148477     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
148627     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
148939     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
149224     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
149332     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
149450     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
149799     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
149915     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
150037     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
150358     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
150486     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
150837     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
151112     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
151198     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
151303     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
151591     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
151727     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
151971     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
152061     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
152185     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
152303     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
152612     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
152949     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
153056     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
154403     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
154622     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
154813     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
155621     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
155735     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
161092     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
161343     INFO  main            d.u.i.k.p.r.p.TestFile    Now processing file /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.m.key 
161343     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Loading environment from /home/runner/work/key/key/key.core/../key.ui/examples/InformationFlow/SimpleEvoting/simple_evoting.Voter(simple_evoting.Voter__onSendBallot(simple_evoting.Server)).Non-interference contract.0.m.key 
161343     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Environment load took 54.1ns 
161344     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Creating init config 
164502     DEBUG main            d.u.i.k.p.i.AbstractProblemLoader Init config took 3.16s 
164552     INFO  main            d.u.i.k.p.i.AbstractProblemLoader Replaying proof simple_evoting.Voter[simple_evoting.Voter::onSendBallot(simple_evoting.Server)].Non-interference contract.0 
164554     DEBUG main            d.u.i.k.p.i.IntermediateProofReplayer Proof replay took 12.1ns 
164554     DEBUG main            d.u.i.k.m.s.ProofScriptEngine 1: 'macro 'infflow-autopilot'' 
164587     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Voter 
164590     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
165117     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
165169     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
165299     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
165346     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
167730     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167738     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167753     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167768     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167776     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167784     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167806     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167821     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167829     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167836     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167851     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167873     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
167887     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
168150     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
168401     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
168535     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
168549     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule JML_represents_clause_for_simple_evoting_Environment_rep 
168556     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
168619     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
168953     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
169298     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
169419     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
169546     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
169660     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
169964     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
170111     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
170242     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
170557     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
170841     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
170986     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
171264     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
171518     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
171601     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
171697     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
171822     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
171930     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
172045     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
172343     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
172451     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
172559     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
172908     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
173013     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
174922     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
175110     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
175340     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
176102     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Message 
176160     DEBUG main            d.u.i.k.p.m.ProofCorrectnessMgt No justification found for rule Class_invariant_axiom_for_simple_evoting_Server 
186751     INFO  main            d.u.i.k.p.r.p.TestFile    ... finished proof: closed. 
2671575    INFO  Test worker     d.u.i.k.p.r.RunAllProofsTestUnit Returning from test SimpleEvoting_fullmacro 

Standard error

Exception in thread "Thread-5" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 255) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_insecure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_l_B_Before_A,_l_B_Before_B),equals(b_0_Before_A,b_0_Before_B)),and(equals(_l_B_After_A,_l_B_After_B),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-7" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A),TRUE)),and(inInt(l1_1_Before_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 231) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(l1_1)(l1_1_Before_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(l1_1_After_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B),TRUE)),and(inInt(l1_1_Before_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(l1_1)(l1_1_Before_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=while_block_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_0 = _l_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(l1_1_After_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_A,l1_1_Before_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(l1_1_After_A,l1_1_After_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-9" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),and(inInt(l1_1_Before_0_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),and(inInt(l1_1_Before_0_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_A_0),TRUE)),and(inInt(l1_1_Before_0_A),inInt(_l_B_Before_A))),geq(_l_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFBlockExamples.java @ line 212) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_A),elem-update(_l_B)(_l_B_Before_A))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_A,b_2))),equals(l1_1_After_0_A,l1_1)),equals(_l_B_After_A,_l_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(contract.IFBlockExamples::exactInstance(self_B_B_0),TRUE)),and(inInt(l1_1_Before_0_B),inInt(_l_B_Before_B))),geq(_l_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),parallel-upd(elem-update(l1_1)(l1_1_Before_0_B),elem-update(_l_B)(_l_B_Before_B))),and(\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    _l_B--;
    l1_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B_0),\[{
  method-frame (
    source=block_while_secure(int)@contract.IFBlockExamples,
    this=self_B
  ) {
    b_2 = _l_B > 0;
  }
}\] (equals(b_2_After_B,b_2))),equals(l1_1_After_0_B,l1_1)),equals(_l_B_After_B,_l_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(l1_1_Before_0_A,l1_1_Before_0_B),equals(_l_B_Before_A,_l_B_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(equals(l1_1_After_0_A,l1_1_After_0_B),equals(_l_B_After_A,_l_B_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-1" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 458) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_while_3(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-3" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 438) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-5" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),leq(Z(0(#)),_x_B_Before_A)<<origin(loop_invariant @ file IFLoopExamples.java @ line 418) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),leq(Z(0(#)),_x_B_Before_B)),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_4(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-7" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 376) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-9" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 335) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=insecure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-11" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 294) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
      while (_x_B > 0) {
        this.low = this.low + 1;
        _x_B = _x_B - 1;
      }
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_doubleNestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-13" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 253) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedTwoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-15" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 223) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    while (_x_B > 0) {
      this.low = this.low + 1;
      _x_B = _x_B - 1;
    }
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_nestedWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-17" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 204) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=notSecure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(b_0_Before_A,b_0_Before_B)),and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-19" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_A<<anonHeapFunction>>)),not(equals(self_A_A,null))),equals(boolean::select(heap,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),inInt(_x_A_Before_A)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>),update-application(parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap)))))),imp(equals(b_Before_A,FALSE),and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_B<<anonHeapFunction>>)),not(equals(self_A_B,null))),equals(boolean::select(heap,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),inInt(_x_A_Before_B)),geq(_x_A_Before_B,Z(1(#)))),update-application(parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap)))))),imp(equals(b_Before_B,FALSE),and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_A<<anonHeapFunction>>)),not(equals(self_A_A,null))),equals(boolean::select(heap,self_A_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_A),TRUE)),inInt(_x_A_Before_A)),geq(_x_A_Before_A,Z(1(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 185) ([])>>),update-application(parallel-upd(elem-update(self_A)(self_A_A),elem-update(_x_A)(_x_A_Before_A)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_A),imp(equals(b_Before_A,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap)))))),imp(equals(b_Before_A,FALSE),and(and(and(equals(self_A_After_LOOP_A,self_A_A),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_A,b))),equals(_x_A_After_A,_x_A)),equals(heap_After_LOOP_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_B<<anonHeapFunction>>)),not(equals(self_A_B,null))),equals(boolean::select(heap,self_A_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_A_B),TRUE)),inInt(_x_A_Before_B)),geq(_x_A_Before_B,Z(1(#)))),update-application(parallel-upd(elem-update(self_A)(self_A_B),elem-update(_x_A)(_x_A_Before_B)),and(\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (and(equals(b,b_Before_B),imp(equals(b_Before_B,TRUE),\<{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    this.low = this.low + 1;
    _x_A = _x_A - 1;
  }
}\> (and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap)))))),imp(equals(b_Before_B,FALSE),and(and(and(equals(self_A_After_LOOP_B,self_A_B),\[{
  method-frame (
    source=notSecure_while_wrongInv(int)@loop.IFLoopExamples,
    this=self_A
  ) {
    b = _x_A > 0;
  }
}\] (equals(b_After_B,b))),equals(_x_A_After_B,_x_A)),equals(heap_After_LOOP_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(int::select(heap_Before_LOOP_A<<anonHeapFunction>>,self_A_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_B<<anonHeapFunction>>,self_A_B,loop.IFLoopExamples::$low)),equals(b_Before_A,b_Before_B)),and(equals(int::select(heap_After_LOOP_A,self_A_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_B,self_A_After_LOOP_B,loop.IFLoopExamples::$low)),equals(b_After_A,b_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-21" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 165) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(equals(_x_B_Before_0_A,_x_B_Before_0_B),equals(b_5_Before_A,b_5_Before_B)),and(equals(_x_B_After_0_A,_x_B_After_0_B),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-23" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 135) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=insecure_twoWhile_2(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-25" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_2_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_A<<anonHeapFunction>>)),not(equals(self_B_A_0,null))),equals(boolean::select(heap,self_B_A_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A_0),TRUE)),inInt(_x_B_Before_0_A)),geq(_x_B_Before_0_A,Z(neglit(1(#))))<<origin(loop_invariant @ file IFLoopExamples.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A_0),elem-update(_x_B)(_x_B_Before_0_A)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_A),imp(equals(b_5_Before_A,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap)))))),imp(equals(b_5_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_0_A,self_B_A_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_A,b_5))),equals(_x_B_After_0_A,_x_B)),equals(heap_After_LOOP_2_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_2_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_2_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_2_B<<anonHeapFunction>>)),not(equals(self_B_B_0,null))),equals(boolean::select(heap,self_B_B_0,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B_0),TRUE)),inInt(_x_B_Before_0_B)),geq(_x_B_Before_0_B,Z(neglit(1(#))))),update-application(parallel-upd(elem-update(self_B)(self_B_B_0),elem-update(_x_B)(_x_B_Before_0_B)),and(\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (and(equals(b_5,b_5_Before_B),imp(equals(b_5_Before_B,TRUE),\<{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap)))))),imp(equals(b_5_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_0_B,self_B_B_0),\[{
  method-frame (
    source=secure_twoWhile(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_5 = _x_B == 0;
  }
}\] (equals(b_5_After_B,b_5))),equals(_x_B_After_0_B,_x_B)),equals(heap_After_LOOP_2_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_2_A<<anonHeapFunction>>,self_B_A_0,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_2_B<<anonHeapFunction>>,self_B_B_0,loop.IFLoopExamples::$low)),equals(_x_B_Before_0_A,_x_B_Before_0_B)),equals(b_5_Before_A,b_5_Before_B)),and(and(equals(int::select(heap_After_LOOP_2_A,self_B_After_LOOP_0_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_2_B,self_B_After_LOOP_0_B,loop.IFLoopExamples::$low)),equals(_x_B_After_0_A,_x_B_After_0_B)),equals(b_5_After_A,b_5_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-27" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(inInt(z_1_Before_A),inInt(_x_B_Before_A))),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(inInt(z_1_Before_B),inInt(_x_B_Before_B))),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(inInt(z_1_Before_A),inInt(_x_B_Before_A))),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 74) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(z_1)(z_1_Before_A),elem-update(_x_B)(_x_B_Before_A))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(z_1_After_A,z_1)),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(inInt(z_1_Before_B),inInt(_x_B_Before_B))),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(z_1)(z_1_Before_B),elem-update(_x_B)(_x_B_Before_B))),and(\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
    z_1 = z_1 + _x_B;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=loc_secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(z_1_After_B,z_1)),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(z_1_Before_A,z_1_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(z_1_After_A,z_1_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-29" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),inInt(_x_B_Before_A)),geq(_x_B_Before_A,Z(0(#)))<<origin(loop_invariant @ file IFLoopExamples.java @ line 54) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),elem-update(_x_B)(_x_B_Before_A)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_A,b_0))),equals(_x_B_After_A,_x_B)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),inInt(_x_B_Before_B)),geq(_x_B_Before_B,Z(0(#)))),update-application(parallel-upd(elem-update(self_B)(self_B_B),elem-update(_x_B)(_x_B_Before_B)),and(\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    this.low = this.low + 1;
    _x_B = _x_B - 1;
  }
}\> (and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = _x_B > 0;
  }
}\] (equals(b_0_After_B,b_0))),equals(_x_B_After_B,_x_B)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(_x_B_Before_A,_x_B_Before_B)),equals(b_0_Before_A,b_0_Before_B)),and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(_x_B_After_A,_x_B_After_B)),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-33" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(and(inInt(_secret_B_A),inInt(y_1_Before_A)),inInt(x_1_Before_A))),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(and(inInt(_secret_B_B),inInt(y_1_Before_B)),inInt(x_1_Before_B))),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_A),TRUE)),and(and(inInt(_secret_B_A),inInt(y_1_Before_A)),inInt(x_1_Before_A))),and(leq(Z(0(#)),y_1_Before_A),leq(y_1_Before_A,Z(0(1(#)))))<<SC, origin(loop_invariant @ file IFLoopExamples.java @ line 22) ([])>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_A),elem-update(y_1)(y_1_Before_A)),elem-update(x_1)(x_1_Before_A))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_A,b_0))),equals(_secret_B_A,_secret_B)),equals(y_1_After_A,y_1)),equals(x_1_After_A,x_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(loop.IFLoopExamples::exactInstance(self_B_B),TRUE)),and(and(inInt(_secret_B_B),inInt(y_1_Before_B)),inInt(x_1_Before_B))),and(leq(Z(0(#)),y_1_Before_B),leq(y_1_Before_B,Z(0(1(#)))))<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(parallel-upd(elem-update(_secret_B)(_secret_B_B),elem-update(y_1)(y_1_Before_B)),elem-update(x_1)(x_1_Before_B))),and(\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    print(x_1);
    if (y_1 == 5) {
      x_1 = _secret_B;
      y_1 = 9;
    }
    x_1++;
    y_1++;
  }
}\> (and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=hammer(int)@loop.IFLoopExamples,
    this=self_B
  ) {
    b_0 = y_1 < 10;
  }
}\] (equals(b_0_After_B,b_0))),equals(_secret_B_B,_secret_B)),equals(y_1_After_B,y_1)),equals(x_1_After_B,x_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,self_B_A,loop.IFLoopExamples::$low),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,self_B_B,loop.IFLoopExamples::$low)),equals(y_1_Before_A,y_1_Before_B)),equals(if-then-else(lt(y_1_Before_A,Z(0(1(#)))),x_1_Before_A,Z(0(#))),if-then-else(lt(y_1_Before_B,Z(0(1(#)))),x_1_Before_B,Z(0(#))))),equals(b_0_Before_A,b_0_Before_B)),and(and(and(equals(int::select(heap_After_LOOP_0_A,self_B_After_LOOP_A,loop.IFLoopExamples::$low),int::select(heap_After_LOOP_0_B,self_B_After_LOOP_B,loop.IFLoopExamples::$low)),equals(y_1_After_A,y_1_After_B)),equals(if-then-else(lt(y_1_After_A,Z(0(1(#)))),x_1_After_A,Z(0(#))),if-then-else(lt(y_1_After_B,Z(0(1(#)))),x_1_After_B,Z(0(#))))),equals(b_0_After_A,b_0_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-11" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),and(or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_A))),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),and(or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_B))),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(equals(b_0_Before_A,FALSE),equals(b_0_Before_B,FALSE)),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),not(equals(self_B_A,null))),equals(boolean::select(heap,self_B_A,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_A),TRUE)),and(or(equals(_a_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_A))),and(and(leq(Z(0(#)),i_1_Before_A),leq(i_1_Before_A,length(_a_B_A)))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 109) ([])>>,and(not(equals(_a_B_A,null)),equals(java.lang.Object[]::exactInstance(_a_B_A),TRUE))<<SC, origin(loop_invariant @ file ObjectOrientation.java @ line 110) ([])>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_A),parallel-upd(elem-update(_a_B)(_a_B_A),elem-update(i_1)(i_1_Before_A))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_A),imp(equals(b_0_Before_A,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_0_Before_A,FALSE),and(and(and(and(equals(self_B_After_LOOP_A,self_B_A),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_A,b_0))),equals(_a_B_A,_a_B)),equals(i_1_After_A,i_1)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),not(equals(self_B_B,null))),equals(boolean::select(heap,self_B_B,java.lang.Object::<created>),TRUE)),equals(object.ObjectOrientation::exactInstance(self_B_B),TRUE)),and(or(equals(_a_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_1_Before_B))),and(and(leq(Z(0(#)),i_1_Before_B),leq(i_1_Before_B,length(_a_B_B)))<<SC>>,and(not(equals(_a_B_B,null)),equals(java.lang.Object[]::exactInstance(_a_B_B),TRUE))<<SC>>)<<SC>>),update-application(parallel-upd(elem-update(self_B)(self_B_B),parallel-upd(elem-update(_a_B)(_a_B_B),elem-update(i_1)(i_1_Before_B))),and(\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (and(equals(b_0,b_0_Before_B),imp(equals(b_0_Before_B,TRUE),\<{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    {
      _a_B[i_1] = new Object();
    }
    i_1++;
  }
}\> (and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_0_Before_B,FALSE),and(and(and(and(equals(self_B_After_LOOP_B,self_B_B),\[{
  method-frame (
    source=secure_while_i(java.lang.Object[])@object.ObjectOrientation,
    this=self_B
  ) {
    b_0 = i_1 < _a_B.length;
  }
}\] (equals(b_0_After_B,b_0))),equals(_a_B_B,_a_B)),equals(i_1_After_B,i_1)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(equals(i_1_Before_A,i_1_Before_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_Before_A,java.lang.Object::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_Before_B,java.lang.Object::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_a_B_B,arr(j))))),equals(b_0_Before_A,b_0_Before_B)),if-then-else(and(equals(b_0_Before_A,FALSE),equals(b_0_Before_B,FALSE)),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)),and(newObjectsIsomorphic(seqSingleton(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#)))))),heap_Before_LOOP_0_A<<anonHeapFunction>>,seqSingleton(java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),heap_Before_LOOP_0_B<<anonHeapFunction>>),imp(equals(java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(sub(i_1_After_A,Z(1(#))))),java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(sub(i_1_After_B,Z(1(#)))))),and(and(and(equals(i_1_After_A,i_1_After_B),equals(length(_a_B_A),length(_a_B_B))),equals(seqDef{j:int}(Z(0(#)),i_1_After_A,java.lang.Object::select(heap_After_LOOP_0_A,_a_B_A,arr(j))),seqDef{j:int}(Z(0(#)),i_1_After_B,java.lang.Object::select(heap_After_LOOP_0_B,_a_B_B,arr(j))))),equals(b_0_After_A,b_0_After_B)))))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more
Exception in thread "Thread-1" java.lang.RuntimeException: Proof attempt failed due to exception:java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),and(or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_A))),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),and(or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_B))),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:254)
	at de.uka.ilkd.key.control.DefaultProofControl$AutoModeThread.run(DefaultProofControl.java:117)
Caused by: java.lang.IndexOutOfBoundsException: Unable to take -1 elements from list [imp(and(update-application(elem-update(heap)(heap_Before_LOOP_0_A<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_A<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_A<<anonHeapFunction>>)),and(or(equals(_t_B_A,null),equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_A))),and(and(leq(Z(0(#)),i_7_Before_A),leq(i_7_Before_A,length(_t_B_A)))<<SC>>,not(equals(_t_B_A,null)))<<SC, origin(loop_invariant @ file Environment.java @ line 105) ([])>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_A),elem-update(i_7)(i_7_Before_A)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_A),imp(equals(b_2_Before_A,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap)))))),imp(equals(b_2_Before_A,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_A,b_2)),equals(_t_B_A,_t_B)),equals(i_7_After_A,i_7)),equals(heap_After_LOOP_0_A,heap))))))),update-application(elem-update(heap)(heap_Before_LOOP_0_B<<anonHeapFunction>>),and(and(and(and(wellFormed(heap_Before_LOOP_0_B<<anonHeapFunction>>),equals(heap,heap_Before_LOOP_0_B<<anonHeapFunction>>)),and(or(equals(_t_B_B,null),equals(boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,java.lang.Object::<created>),TRUE))<<SC>>,inInt(i_7_Before_B))),and(and(leq(Z(0(#)),i_7_Before_B),leq(i_7_Before_B,length(_t_B_B)))<<SC>>,not(equals(_t_B_B,null)))<<SC>>),update-application(parallel-upd(elem-update(_t_B)(_t_B_B),elem-update(i_7)(i_7_Before_B)),and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (and(equals(b_2,b_2_Before_B),imp(equals(b_2_Before_B,TRUE),\<{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    {
      untrustedOutput(_t_B[i_7]);
    }
    i_7++;
  }
}\> (and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap)))))),imp(equals(b_2_Before_B,FALSE),and(and(and(\[{
  method-frame (
    source=untrustedOutputMessage(byte[])@simple_evoting.Environment
  ) {
    b_2 = i_7 < _t_B.length;
  }
}\] (equals(b_2_After_B,b_2)),equals(_t_B_B,_t_B)),equals(i_7_After_B,i_7)),equals(heap_After_LOOP_0_B,heap))))))))<<selfComposedExecution>>,imp(and(and(and(and(equals(boolean::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,null,simple_evoting.Environment::$result),boolean::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_Before_LOOP_0_A<<anonHeapFunction>>,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_Before_LOOP_0_B<<anonHeapFunction>>,_t_B_B,arr(i))))),equals(i_7_Before_A,i_7_Before_B)),equals(b_2_Before_A,b_2_Before_B)),and(and(and(and(equals(boolean::select(heap_After_LOOP_0_A,null,simple_evoting.Environment::$result),boolean::select(heap_After_LOOP_0_B,null,simple_evoting.Environment::$result)),equals(_t_B_A,_t_B_B)),equals(seqDef{i:int}(Z(0(#)),length(_t_B_A),int::select(heap_After_LOOP_0_A,_t_B_A,arr(i))),seqDef{i:int}(Z(0(#)),length(_t_B_B),int::select(heap_After_LOOP_0_B,_t_B_B,arr(i))))),equals(i_7_After_A,i_7_After_B)),equals(b_2_After_A,b_2_After_B))<<postCondition>>))]
	at org.key_project.util.collection.ImmutableSLList.take(ImmutableSLList.java:149)
	at de.uka.ilkd.key.logic.Semisequent.insertAndRemoveRedundancyHelper(Semisequent.java:176)
	at de.uka.ilkd.key.logic.Semisequent.replace(Semisequent.java:260)
	at de.uka.ilkd.key.logic.Sequent.changeFormula(Sequent.java:190)
	at de.uka.ilkd.key.proof.Goal.changeFormula(Goal.java:405)
	at de.uka.ilkd.key.rule.OneStepSimplifier.apply(OneStepSimplifier.java:626)
	at de.uka.ilkd.key.rule.AbstractBuiltInRuleApp.execute(AbstractBuiltInRuleApp.java:77)
	at de.uka.ilkd.key.proof.Goal.apply(Goal.java:618)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.applyAutomaticRule(ApplyStrategy.java:117)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.doWork(ApplyStrategy.java:144)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.executeStrategy(ApplyStrategy.java:293)
	at de.uka.ilkd.key.prover.impl.ApplyStrategy.start(ApplyStrategy.java:261)
	at de.uka.ilkd.key.util.ProofStarter.start(ProofStarter.java:248)
	... 1 more