FunctionSpecifications.dfy(29,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(31,12): Related location: This is the postcondition that might not hold.
Execution trace:
    (0,0): anon0
    (0,0): anon10_Else
    (0,0): anon11_Else
    (0,0): anon12_Then
    (0,0): anon13_Else
    (0,0): anon9
FunctionSpecifications.dfy(38,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(40,23): Related location: This is the postcondition that might not hold.
Execution trace:
    (0,0): anon0
    (0,0): anon15_Else
    (0,0): anon18_Else
    (0,0): anon19_Then
    (0,0): anon14
FunctionSpecifications.dfy(53,10): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
    (0,0): anon0
    (0,0): anon11_Then
    (0,0): anon5
FunctionSpecifications.dfy(59,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(60,21): Related location: This is the postcondition that might not hold.
Execution trace:
    (0,0): anon0
    (0,0): anon7_Else
FunctionSpecifications.dfy(108,22): Error: assertion violation
Execution trace:
    (0,0): anon0
FunctionSpecifications.dfy(111,22): Error: assertion violation
Execution trace:
    (0,0): anon0
FunctionSpecifications.dfy(126,26): Error: assertion violation
Execution trace:
    (0,0): anon0
    (0,0): anon3_Then
FunctionSpecifications.dfy(130,26): Error: assertion violation
Execution trace:
    (0,0): anon0
    (0,0): anon3_Else
FunctionSpecifications.dfy(135,19): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(137,28): Related location: This is the postcondition that might not hold.
Execution trace:
    (0,0): anon0
    (0,0): anon4_Else
FunctionSpecifications.dfy(146,2): Error: failure to decrease termination measure
Execution trace:
    (0,0): anon0
    (0,0): anon4_Else
FunctionSpecifications.dfy(153,2): Error: failure to decrease termination measure
Execution trace:
    (0,0): anon0
    (0,0): anon4_Else
FunctionSpecifications.dfy(158,2): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
    (0,0): anon0
    (0,0): anon4_Else
FunctionSpecifications.dfy(164,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(165,14): Related location: This is the postcondition that might not hold.
Execution trace:
    (0,0): anon0
    (0,0): anon4_Else

Dafny program verifier finished with 10 verified, 13 errors
