<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
<why3session shape_version="6">
<prover id="0" name="CVC5" version="1.0.5" timelimit="1" steplimit="0" memlimit="1000"/>
<prover id="1" name="Z3" version="4.8.6" timelimit="1" steplimit="0" memlimit="1000"/>
<prover id="2" name="Alt-Ergo" version="2.3.0" timelimit="1" steplimit="0" memlimit="1000"/>
<prover id="4" name="Z3" version="4.12.2" timelimit="1" steplimit="0" memlimit="1000"/>
<file format="whyml" proved="true">
<path name=".."/><path name="string_search.mlw"/>
<theory name="Occurs" proved="true">
 <goal name="occurs&#39;vc" expl="VC for occurs" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="occurs&#39;vc.0" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="24"/></proof>
  </goal>
  <goal name="occurs&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="95"/></proof>
  </goal>
  <goal name="occurs&#39;vc.2" expl="assertion" proved="true">
  <proof prover="1"><result status="valid" time="0.020000" steps="14982"/></proof>
  </goal>
  <goal name="occurs&#39;vc.3" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="33"/></proof>
  </goal>
  <goal name="occurs&#39;vc.4" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="35"/></proof>
  </goal>
  <goal name="occurs&#39;vc.5" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="35"/></proof>
  </goal>
  <goal name="occurs&#39;vc.6" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.050000" steps="186"/></proof>
  </goal>
  <goal name="occurs&#39;vc.7" expl="loop invariant preservation" proved="true">
  <transf name="rewrite" proved="true" arg1="&lt;-" arg2="concat_substring">
   <goal name="occurs&#39;vc.7.0" expl="loop invariant preservation" proved="true">
   <proof prover="2" timelimit="5"><result status="valid" time="2.230000" steps="3506"/></proof>
   </goal>
   <goal name="occurs&#39;vc.7.1" expl="rewrite premises" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="37"/></proof>
   </goal>
   <goal name="occurs&#39;vc.7.2" expl="rewrite premises" proved="true">
   <proof prover="2"><result status="valid" time="0.020000" steps="37"/></proof>
   </goal>
   <goal name="occurs&#39;vc.7.3" expl="rewrite premises" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="37"/></proof>
   </goal>
   <goal name="occurs&#39;vc.7.4" expl="rewrite premises" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="37"/></proof>
   </goal>
   <goal name="occurs&#39;vc.7.5" expl="rewrite premises" proved="true">
   <proof prover="2"><result status="valid" time="0.020000" steps="37"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="occurs&#39;vc.8" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.060000" steps="244"/></proof>
  </goal>
  <goal name="occurs&#39;vc.9" expl="VC for occurs" proved="true">
  <proof prover="1"><result status="valid" time="0.020000" steps="14496"/></proof>
  </goal>
 </transf>
 </goal>
</theory>
<theory name="Naive" proved="true">
 <goal name="search1&#39;vc" expl="VC for search1" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="search1&#39;vc.0" expl="integer overflow" proved="true">
  <proof prover="4"><result status="valid" time="0.020000" steps="12979"/></proof>
  </goal>
  <goal name="search1&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="24"/></proof>
  </goal>
  <goal name="search1&#39;vc.2" expl="precondition" proved="true">
  <proof prover="1"><result status="valid" time="0.020000" steps="14391"/></proof>
  </goal>
  <goal name="search1&#39;vc.3" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="28"/></proof>
  </goal>
  <goal name="search1&#39;vc.4" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="30"/></proof>
  </goal>
  <goal name="search1&#39;vc.5" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="116"/></proof>
  </goal>
  <goal name="search1&#39;vc.6" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="22"/></proof>
  </goal>
  <goal name="search1&#39;vc.7" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="70"/></proof>
  </goal>
  <goal name="search1&#39;vc.8" expl="out of loop bounds" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="21"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="search2&#39;vc" expl="VC for search2" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="search2&#39;vc.0" expl="integer overflow" proved="true">
  <proof prover="4"><result status="valid" time="0.030000" steps="12979"/></proof>
  </goal>
  <goal name="search2&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="24"/></proof>
  </goal>
  <goal name="search2&#39;vc.2" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="search2&#39;vc.2.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="26"/></proof>
   </goal>
   <goal name="search2&#39;vc.2.1" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="26"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="search2&#39;vc.3" expl="precondition" proved="true">
  <proof prover="1"><result status="valid" time="0.020000" steps="16477"/></proof>
  </goal>
  <goal name="search2&#39;vc.4" expl="postcondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="search2&#39;vc.4.0" expl="postcondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="28"/></proof>
   </goal>
   <goal name="search2&#39;vc.4.1" expl="postcondition" proved="true">
   <transf name="unfold" proved="true" arg1="matches">
    <goal name="search2&#39;vc.4.1.0" expl="postcondition" proved="true">
    <transf name="split_vc" proved="true" >
     <goal name="search2&#39;vc.4.1.0.0" expl="postcondition" proved="true">
     <proof prover="1"><result status="valid" time="0.020000" steps="16248"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="search2&#39;vc.5" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="167"/></proof>
  </goal>
  <goal name="search2&#39;vc.6" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="34"/></proof>
  </goal>
  <goal name="search2&#39;vc.7" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="22"/></proof>
  </goal>
  <goal name="search2&#39;vc.8" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="70"/></proof>
  </goal>
  <goal name="search2&#39;vc.9" expl="out of loop bounds" proved="true">
  <proof prover="1"><result status="valid" time="0.030000" steps="14975"/></proof>
  </goal>
 </transf>
 </goal>
</theory>
<theory name="BadShiftTable" proved="true">
 <goal name="bad_shift_table&#39;vc" expl="VC for bad_shift_table" proved="true">
 <proof prover="2"><result status="valid" time="0.030000" steps="161"/></proof>
 </goal>
 <goal name="make_table&#39;vc" expl="VC for make_table" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="make_table&#39;vc.0" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.060000" steps="18"/></proof>
  </goal>
  <goal name="make_table&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="21"/></proof>
  </goal>
  <goal name="make_table&#39;vc.2" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="116"/></proof>
  </goal>
  <goal name="make_table&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="27"/></proof>
  </goal>
  <goal name="make_table&#39;vc.4" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="25"/></proof>
  </goal>
  <goal name="make_table&#39;vc.5" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="25"/></proof>
  </goal>
  <goal name="make_table&#39;vc.6" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="143"/></proof>
  </goal>
  <goal name="make_table&#39;vc.7" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.110000" steps="489"/></proof>
  </goal>
  <goal name="make_table&#39;vc.8" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="322"/></proof>
  </goal>
  <goal name="make_table&#39;vc.9" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="27"/></proof>
  </goal>
  <goal name="make_table&#39;vc.10" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="49"/></proof>
  </goal>
  <goal name="make_table&#39;vc.11" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.080000" steps="83"/></proof>
  </goal>
  <goal name="make_table&#39;vc.12" expl="out of loop bounds" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="18"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="shift&#39;vc" expl="VC for shift" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="shift&#39;vc.0" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="0.040000" steps="91"/></proof>
  </goal>
  <goal name="shift&#39;vc.1" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="0.070000" steps="205"/></proof>
  </goal>
  <goal name="shift&#39;vc.2" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="30"/></proof>
  </goal>
  <goal name="shift&#39;vc.3" expl="postcondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="shift&#39;vc.3.0" expl="postcondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="24"/></proof>
   </goal>
  </transf>
  </goal>
 </transf>
 </goal>
 <goal name="no_shift&#39;vc" expl="VC for no_shift" proved="true">
 <proof prover="0"><result status="valid" time="0.160000" steps="21219"/></proof>
 </goal>
 <goal name="search&#39;vc" expl="VC for search" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="search&#39;vc.0" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="23"/></proof>
  </goal>
  <goal name="search&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="1"><result status="valid" time="0.060000" steps="4771"/></proof>
  </goal>
  <goal name="search&#39;vc.2" expl="integer overflow" proved="true">
  <proof prover="1"><result status="valid" time="0.030000" steps="78594"/></proof>
  </goal>
  <goal name="search&#39;vc.3" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="31"/></proof>
  </goal>
  <goal name="search&#39;vc.4" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="33"/></proof>
  </goal>
  <goal name="search&#39;vc.5" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="35"/></proof>
  </goal>
  <goal name="search&#39;vc.6" expl="integer overflow" proved="true">
  <proof prover="1"><result status="valid" time="0.040000" steps="102836"/></proof>
  </goal>
  <goal name="search&#39;vc.7" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="35"/></proof>
  </goal>
  <goal name="search&#39;vc.8" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="125"/></proof>
  </goal>
  <goal name="search&#39;vc.9" expl="integer overflow" proved="true">
  <proof prover="1"><result status="valid" time="0.030000" steps="87403"/></proof>
  </goal>
  <goal name="search&#39;vc.10" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="41"/></proof>
  </goal>
  <goal name="search&#39;vc.11" expl="precondition" proved="true">
  <proof prover="1"><result status="valid" time="0.030000" steps="76638"/></proof>
  </goal>
  <goal name="search&#39;vc.12" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="44"/></proof>
  </goal>
  <goal name="search&#39;vc.13" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="43"/></proof>
  </goal>
  <goal name="search&#39;vc.14" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="search&#39;vc.14.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="39"/></proof>
   </goal>
   <goal name="search&#39;vc.14.1" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.020000" steps="39"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="search&#39;vc.15" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="44"/></proof>
  </goal>
  <goal name="search&#39;vc.16" expl="integer overflow" proved="true">
  <proof prover="1"><result status="valid" time="0.030000" steps="118208"/></proof>
  </goal>
  <goal name="search&#39;vc.17" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="200"/></proof>
  </goal>
  <goal name="search&#39;vc.18" expl="loop variant decrease" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="118"/></proof>
  </goal>
  <goal name="search&#39;vc.19" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="155"/></proof>
  </goal>
  <goal name="search&#39;vc.20" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.370000" steps="927"/></proof>
  </goal>
  <goal name="search&#39;vc.21" expl="postcondition" proved="true">
  <proof prover="2" timelimit="5"><result status="valid" time="0.010000" steps="31"/></proof>
  </goal>
  <goal name="search&#39;vc.22" expl="postcondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="search&#39;vc.22.0" expl="postcondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="107"/></proof>
   </goal>
   <goal name="search&#39;vc.22.1" expl="postcondition" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="29"/></proof>
   </goal>
  </transf>
  </goal>
 </transf>
 </goal>
</theory>
</file>
</why3session>
