diff --git a/2048/.frama-c/2048.eva/alarms.csv b/2048/.frama-c/2048.eva/alarms.csv
index b86e471921772a4d363bb00bbdeafeeda1b26c0d..aaa699f99f30908f2f5859157eac18e84fb58642 100644
--- a/2048/.frama-c/2048.eva/alarms.csv
+++ b/2048/.frama-c/2048.eva/alarms.csv
@@ -1,18 +1,18 @@
 directory	file	line	function	property kind	status	property
 .	2048.c	37	getColor	mem_access	Unknown	\valid_read(foreground)
 .	2048.c	51	drawBoard	precondition of printf_va_3	Unknown	valid_read_string(param0)
-.	2048.c	51	printf_va_3	precondition	Unknown	valid_read_string(param0)
 .	2048.c	58	drawBoard	precondition of printf_va_7	Unknown	valid_read_string(param0)
-.	2048.c	58	printf_va_7	precondition	Unknown	valid_read_string(param0)
 .	2048.c	61	drawBoard	shift	Unknown	0 ≤ (int)(*(board + x))[y] < 32
 .	2048.c	62	drawBoard	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 .	2048.c	63	drawBoard	precondition of printf_va_8	Unknown	valid_read_string(param2)
-.	2048.c	63	printf_va_8	precondition	Unknown	valid_read_string(param2)
 .	2048.c	72	drawBoard	precondition of printf_va_12	Unknown	valid_read_string(param0)
-.	2048.c	72	printf_va_12	precondition	Unknown	valid_read_string(param0)
 .	2048.c	90	findTarget	mem_access	Unknown	\valid_read(array + t)
 .	2048.c	123	slideArray	shift	Unknown	0 ≤ (int)*(array + t) < 32
 .	2048.c	249	addRandom	initialization	Unknown	\initialized(&list[r][0])
 .	2048.c	250	addRandom	initialization	Unknown	\initialized(&list[r][1])
 .	2048.c	287	setBufferedInput	initialization	Unknown	\initialized(&new.c_lflag)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_12	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_3	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_7	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_8	precondition	Unknown	valid_read_string(param2)
 FRAMAC_SHARE/libc	string.h	128	strlen	precondition	Unknown	valid_string_s: valid_read_string(s)
diff --git a/2048/.frama-c/2048.parse/framac.ast b/2048/.frama-c/2048.parse/framac.ast
index 88ee24d00f8cf8061adf0a0897a24695caf4f4cd..3741171e06d0dc53d605db1224ba49fda1523994 100644
--- a/2048/.frama-c/2048.parse/framac.ast
+++ b/2048/.frama-c/2048.parse/framac.ast
@@ -13,10 +13,10 @@
 #include "unistd.h"
 uint32_t score = (unsigned int)0;
 uint8_t scheme = (unsigned char)0;
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -173,8 +173,8 @@ int printf_va_1(char const * restrict format);
  */
 int printf_va_2(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -199,8 +199,8 @@ int printf_va_3(char const * restrict format, char *param0);
  */
 int printf_va_4(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -225,8 +225,8 @@ int printf_va_5(char const * restrict format, char *param0);
  */
 int printf_va_6(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -239,10 +239,10 @@ int printf_va_6(char const * restrict format);
  */
 int printf_va_7(char const * restrict format, char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -252,10 +252,10 @@ int printf_va_7(char const * restrict format, char *param0);
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param4);
+/*@ requires valid_read_string(param1);
     requires valid_read_string(param2);
-    requires valid_read_string(param1);
+    requires valid_read_string(param4);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -284,8 +284,8 @@ int printf_va_8(char const * restrict format, int param0, char *param1,
  */
 int printf_va_9(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -310,8 +310,8 @@ int printf_va_10(char const * restrict format, char *param0);
  */
 int printf_va_11(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -336,8 +336,8 @@ int printf_va_12(char const * restrict format, char *param0);
  */
 int printf_va_13(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/basic-cwe-examples/.frama-c/cwe20-2-precise.parse/framac.ast b/basic-cwe-examples/.frama-c/cwe20-2-precise.parse/framac.ast
index a854be759073a5f08a96d97836a3672b6cbb7ab1..64b1d602c43fa9b0821add8b6dacd44d7fb0fd27 100644
--- a/basic-cwe-examples/.frama-c/cwe20-2-precise.parse/framac.ast
+++ b/basic-cwe-examples/.frama-c/cwe20-2-precise.parse/framac.ast
@@ -19,8 +19,8 @@ int stack_top;
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
diff --git a/basic-cwe-examples/.frama-c/cwe20-2.parse/framac.ast b/basic-cwe-examples/.frama-c/cwe20-2.parse/framac.ast
index a854be759073a5f08a96d97836a3672b6cbb7ab1..64b1d602c43fa9b0821add8b6dacd44d7fb0fd27 100644
--- a/basic-cwe-examples/.frama-c/cwe20-2.parse/framac.ast
+++ b/basic-cwe-examples/.frama-c/cwe20-2.parse/framac.ast
@@ -19,8 +19,8 @@ int stack_top;
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
diff --git a/basic-cwe-examples/.frama-c/cwe20-precise.parse/framac.ast b/basic-cwe-examples/.frama-c/cwe20-precise.parse/framac.ast
index 109cffc1abdacd76beb9949de21a7e6185d392c1..06b6b4948badc60f9efeb4d68d0371634a8cfb7c 100644
--- a/basic-cwe-examples/.frama-c/cwe20-precise.parse/framac.ast
+++ b/basic-cwe-examples/.frama-c/cwe20-precise.parse/framac.ast
@@ -20,8 +20,8 @@ typedef struct _board_square_t board_square_t;
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
@@ -61,8 +61,8 @@ int fprintf_va_1(FILE * restrict stream, char const * restrict format);
  */
 int printf_va_2(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
diff --git a/basic-cwe-examples/.frama-c/cwe20.parse/framac.ast b/basic-cwe-examples/.frama-c/cwe20.parse/framac.ast
index 109cffc1abdacd76beb9949de21a7e6185d392c1..06b6b4948badc60f9efeb4d68d0371634a8cfb7c 100644
--- a/basic-cwe-examples/.frama-c/cwe20.parse/framac.ast
+++ b/basic-cwe-examples/.frama-c/cwe20.parse/framac.ast
@@ -20,8 +20,8 @@ typedef struct _board_square_t board_square_t;
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
@@ -61,8 +61,8 @@ int fprintf_va_1(FILE * restrict stream, char const * restrict format);
  */
 int printf_va_2(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, __fc_stdin->__fc_FILE_data, *param0;
     assigns \result
diff --git a/c-testsuite/.frama-c/00132.parse/framac.ast b/c-testsuite/.frama-c/00132.parse/framac.ast
index d50e534a13a67307892e4b4679385f0491fd3caa..1866d627ba748257953eaddc0a23269172a7f630 100644
--- a/c-testsuite/.frama-c/00132.parse/framac.ast
+++ b/c-testsuite/.frama-c/00132.parse/framac.ast
@@ -28,9 +28,9 @@ int printf_va_1(char const * restrict format);
  */
 int printf_va_2(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00173.parse/framac.ast b/c-testsuite/.frama-c/00173.parse/framac.ast
index b64f120586a463d1aaefc3fb09df1771e93a1086..f440c5c4271cac0cbeb174b734793aa14ec50ae5 100644
--- a/c-testsuite/.frama-c/00173.parse/framac.ast
+++ b/c-testsuite/.frama-c/00173.parse/framac.ast
@@ -3,8 +3,8 @@
 #include "stdarg.h"
 #include "stddef.h"
 #include "stdio.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31,8 +31,8 @@ int printf_va_1(char const * restrict format, char *param0);
  */
 int printf_va_2(char const * restrict format, int param0, int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00179.parse/framac.ast b/c-testsuite/.frama-c/00179.parse/framac.ast
index f5e01827258b1484dbc8b2ad8d5ced83496f1977..d5f9635457aacbe41701b8d1a58ddeef92c95325 100644
--- a/c-testsuite/.frama-c/00179.parse/framac.ast
+++ b/c-testsuite/.frama-c/00179.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "string.c"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22,8 +22,8 @@
  */
 int printf_va_1(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -88,8 +88,8 @@ int printf_va_5(char const * restrict format, int param0);
  */
 int printf_va_6(char const * restrict format, size_t param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -154,8 +154,8 @@ int printf_va_10(char const * restrict format, int param0);
  */
 int printf_va_11(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -168,8 +168,8 @@ int printf_va_11(char const * restrict format, int param0);
  */
 int printf_va_12(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -195,8 +195,8 @@ int printf_va_13(char const * restrict format, char *param0);
  */
 int printf_va_14(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -209,8 +209,8 @@ int printf_va_14(char const * restrict format, int param0);
  */
 int printf_va_15(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00180.parse/framac.ast b/c-testsuite/.frama-c/00180.parse/framac.ast
index 03b64deebdb24deb5ed33bdc1e72e7a447be3153..0be9591b19d8c84bff1e7354380b1ccd4d6cdaf9 100644
--- a/c-testsuite/.frama-c/00180.parse/framac.ast
+++ b/c-testsuite/.frama-c/00180.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "string.c"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00182.parse/framac.ast b/c-testsuite/.frama-c/00182.parse/framac.ast
index e5f96f2688f305f7b32c875aead79cac82519327..5833954a170b4f161da7acb6979a0d9bbbda5ee4 100644
--- a/c-testsuite/.frama-c/00182.parse/framac.ast
+++ b/c-testsuite/.frama-c/00182.parse/framac.ast
@@ -204,8 +204,8 @@ void print_led(unsigned long x, char *buf)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00186.eva/alarms.csv b/c-testsuite/.frama-c/00186.eva/alarms.csv
index 5c4a492f18a90064a9301e79a5938bdbeebd35aa..41d65666b7346bdf4a6f50f5fda8faf91cdb598f 100644
--- a/c-testsuite/.frama-c/00186.eva/alarms.csv
+++ b/c-testsuite/.frama-c/00186.eva/alarms.csv
@@ -1,3 +1,3 @@
 directory	file	line	function	property kind	status	property
 .	00186.c	11	main	precondition of printf_va_1	Unknown	valid_read_string(param0)
-.	00186.c	11	printf_va_1	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1	precondition	Unknown	valid_read_string(param0)
diff --git a/c-testsuite/.frama-c/00186.parse/framac.ast b/c-testsuite/.frama-c/00186.parse/framac.ast
index e456e490f0dbfb8e6c1b301d633e0c57909c631f..baf54b6570ffbae1274e4c6737bdd3ad938a6ee1 100644
--- a/c-testsuite/.frama-c/00186.parse/framac.ast
+++ b/c-testsuite/.frama-c/00186.parse/framac.ast
@@ -10,8 +10,8 @@
  */
 int sprintf_va_1(char * restrict s, char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00187.eva/alarms.csv b/c-testsuite/.frama-c/00187.eva/alarms.csv
index 4ea4b6afb37ff89ff1cbf431830bf5d818078752..b578e0614a5df725f5632174e1dd44c246b91b3a 100644
--- a/c-testsuite/.frama-c/00187.eva/alarms.csv
+++ b/c-testsuite/.frama-c/00187.eva/alarms.csv
@@ -2,12 +2,12 @@ directory	file	line	function	property kind	status	property
 .	00187.c	6	main	precondition of fwrite	Unknown	valid_stream: \valid(stream)
 .	00187.c	11	main	precondition of fread	Unknown	valid_stream: \valid(stream)
 .	00187.c	17	main	precondition of printf_va_2	Unknown	valid_read_string(param0)
-.	00187.c	17	printf_va_2	precondition	Unknown	valid_read_string(param0)
 .	00187.c	22	main	precondition of fgetc	Unknown	valid_stream: \valid(stream)
 .	00187.c	33	main	precondition of getc	Unknown	valid_stream: \valid(stream)
 .	00187.c	44	main	precondition of fgets	Unknown	valid_stream: \valid(stream)
 .	00187.c	45	main	precondition of printf_va_5	Unknown	valid_read_string(param0)
-.	00187.c	45	printf_va_5	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_2	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_5	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdio.h	258	fgetc	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	266	fgets	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	296	getc	precondition	Unknown	valid_stream: \valid(stream)
diff --git a/c-testsuite/.frama-c/00187.parse/framac.ast b/c-testsuite/.frama-c/00187.parse/framac.ast
index e998cd70233199e1363c6fe120acb636c61a7d91..5d7deb4d3327476fea1a9ca45fbdaf889b108e5d 100644
--- a/c-testsuite/.frama-c/00187.parse/framac.ast
+++ b/c-testsuite/.frama-c/00187.parse/framac.ast
@@ -15,8 +15,8 @@
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -57,8 +57,8 @@ int printf_va_3(char const * restrict format, int param0, int param1);
  */
 int printf_va_4(char const * restrict format, int param0, int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00200.parse/framac.ast b/c-testsuite/.frama-c/00200.parse/framac.ast
index fa0793822093f0ff8c097752a5eac2e5af4f3208..3f520e7896b8122943ccdbce2f43f620c37a044b 100644
--- a/c-testsuite/.frama-c/00200.parse/framac.ast
+++ b/c-testsuite/.frama-c/00200.parse/framac.ast
@@ -5,8 +5,8 @@
 #include "stdio.h"
 static int debug;
 static int nfailed = 0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21,8 +21,8 @@ static int nfailed = 0;
 int printf_va_1(char const * restrict format, char *param0, int param1,
                 int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00204.parse/framac.ast b/c-testsuite/.frama-c/00204.parse/framac.ast
index fb32561b21cca28b03592b384fde3f6faa896043..1d11f51d72132b9db34d56253105db30270874fd 100644
--- a/c-testsuite/.frama-c/00204.parse/framac.ast
+++ b/c-testsuite/.frama-c/00204.parse/framac.ast
@@ -278,8 +278,8 @@ struct hfa34 hfa34 =
    .b = (long double)34.2,
    .c = (long double)34.3,
    .d = (long double)34.4};
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 1);
+/*@ requires valid_read_nstring(param0, 1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -298,8 +298,8 @@ void fa_s1(struct s1 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 2);
+/*@ requires valid_read_nstring(param0, 2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -318,8 +318,8 @@ void fa_s2(struct s2 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 3);
+/*@ requires valid_read_nstring(param0, 3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -338,8 +338,8 @@ void fa_s3(struct s3 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 4);
+/*@ requires valid_read_nstring(param0, 4);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -358,8 +358,8 @@ void fa_s4(struct s4 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 5);
+/*@ requires valid_read_nstring(param0, 5);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -378,8 +378,8 @@ void fa_s5(struct s5 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 6);
+/*@ requires valid_read_nstring(param0, 6);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -398,8 +398,8 @@ void fa_s6(struct s6 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 7);
+/*@ requires valid_read_nstring(param0, 7);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -418,8 +418,8 @@ void fa_s7(struct s7 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 8);
+/*@ requires valid_read_nstring(param0, 8);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -438,8 +438,8 @@ void fa_s8(struct s8 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 9);
+/*@ requires valid_read_nstring(param0, 9);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -458,8 +458,8 @@ void fa_s9(struct s9 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 10);
+/*@ requires valid_read_nstring(param0, 10);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -478,8 +478,8 @@ void fa_s10(struct s10 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 11);
+/*@ requires valid_read_nstring(param0, 11);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -498,8 +498,8 @@ void fa_s11(struct s11 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 12);
+/*@ requires valid_read_nstring(param0, 12);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -518,8 +518,8 @@ void fa_s12(struct s12 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 13);
+/*@ requires valid_read_nstring(param0, 13);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -538,8 +538,8 @@ void fa_s13(struct s13 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 14);
+/*@ requires valid_read_nstring(param0, 14);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -558,8 +558,8 @@ void fa_s14(struct s14 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 15);
+/*@ requires valid_read_nstring(param0, 15);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -578,8 +578,8 @@ void fa_s15(struct s15 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 16);
+/*@ requires valid_read_nstring(param0, 16);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -598,8 +598,8 @@ void fa_s16(struct s16 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 17);
+/*@ requires valid_read_nstring(param0, 17);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -863,13 +863,13 @@ void fa_hfa34(struct hfa34 a)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param5, 3);
-    requires valid_read_nstring(param4, 3);
-    requires valid_read_nstring(param3, 3);
-    requires valid_read_nstring(param2, 3);
+/*@ requires valid_read_nstring(param0, 3);
     requires valid_read_nstring(param1, 3);
-    requires valid_read_nstring(param0, 3);
+    requires valid_read_nstring(param2, 3);
+    requires valid_read_nstring(param3, 3);
+    requires valid_read_nstring(param4, 3);
+    requires valid_read_nstring(param5, 3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -894,13 +894,13 @@ void fa1(struct s8 a, struct s9 b, struct s10 c, struct s11 d, struct s12 e,
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param5, 3);
-    requires valid_read_nstring(param4, 3);
-    requires valid_read_nstring(param3, 3);
-    requires valid_read_nstring(param2, 3);
+/*@ requires valid_read_nstring(param0, 3);
     requires valid_read_nstring(param1, 3);
-    requires valid_read_nstring(param0, 3);
+    requires valid_read_nstring(param2, 3);
+    requires valid_read_nstring(param3, 3);
+    requires valid_read_nstring(param4, 3);
+    requires valid_read_nstring(param5, 3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -949,10 +949,10 @@ void fa3(struct hfa14 a, struct hfa23 b, struct hfa32 c)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param6, 3);
+/*@ requires valid_read_nstring(param0, 1);
     requires valid_read_nstring(param3, 2);
-    requires valid_read_nstring(param0, 1);
+    requires valid_read_nstring(param6, 3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1188,8 +1188,8 @@ struct hfa34 fr_hfa34(void)
  */
 int printf_va_35(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 1);
+/*@ requires valid_read_nstring(param0, 1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1202,8 +1202,8 @@ int printf_va_35(char const * restrict format);
  */
 int printf_va_36(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 2);
+/*@ requires valid_read_nstring(param0, 2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1216,8 +1216,8 @@ int printf_va_36(char const * restrict format, char *param0);
  */
 int printf_va_37(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 3);
+/*@ requires valid_read_nstring(param0, 3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1230,8 +1230,8 @@ int printf_va_37(char const * restrict format, char *param0);
  */
 int printf_va_38(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 4);
+/*@ requires valid_read_nstring(param0, 4);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1244,8 +1244,8 @@ int printf_va_38(char const * restrict format, char *param0);
  */
 int printf_va_39(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 5);
+/*@ requires valid_read_nstring(param0, 5);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1258,8 +1258,8 @@ int printf_va_39(char const * restrict format, char *param0);
  */
 int printf_va_40(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 6);
+/*@ requires valid_read_nstring(param0, 6);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1272,8 +1272,8 @@ int printf_va_40(char const * restrict format, char *param0);
  */
 int printf_va_41(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 7);
+/*@ requires valid_read_nstring(param0, 7);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1286,8 +1286,8 @@ int printf_va_41(char const * restrict format, char *param0);
  */
 int printf_va_42(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 8);
+/*@ requires valid_read_nstring(param0, 8);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1300,8 +1300,8 @@ int printf_va_42(char const * restrict format, char *param0);
  */
 int printf_va_43(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 9);
+/*@ requires valid_read_nstring(param0, 9);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1314,8 +1314,8 @@ int printf_va_43(char const * restrict format, char *param0);
  */
 int printf_va_44(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 10);
+/*@ requires valid_read_nstring(param0, 10);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1328,8 +1328,8 @@ int printf_va_44(char const * restrict format, char *param0);
  */
 int printf_va_45(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 11);
+/*@ requires valid_read_nstring(param0, 11);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1342,8 +1342,8 @@ int printf_va_45(char const * restrict format, char *param0);
  */
 int printf_va_46(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 12);
+/*@ requires valid_read_nstring(param0, 12);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1356,8 +1356,8 @@ int printf_va_46(char const * restrict format, char *param0);
  */
 int printf_va_47(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 13);
+/*@ requires valid_read_nstring(param0, 13);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1370,8 +1370,8 @@ int printf_va_47(char const * restrict format, char *param0);
  */
 int printf_va_48(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 14);
+/*@ requires valid_read_nstring(param0, 14);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1384,8 +1384,8 @@ int printf_va_48(char const * restrict format, char *param0);
  */
 int printf_va_49(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 15);
+/*@ requires valid_read_nstring(param0, 15);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1398,8 +1398,8 @@ int printf_va_49(char const * restrict format, char *param0);
  */
 int printf_va_50(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 16);
+/*@ requires valid_read_nstring(param0, 16);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1412,8 +1412,8 @@ int printf_va_50(char const * restrict format, char *param0);
  */
 int printf_va_51(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 17);
+/*@ requires valid_read_nstring(param0, 17);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1710,8 +1710,8 @@ int match(char const **s, char const *f)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 7);
+/*@ requires valid_read_nstring(param0, 7);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1724,8 +1724,8 @@ int match(char const **s, char const *f)
  */
 int printf_va_65(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 9);
+/*@ requires valid_read_nstring(param0, 9);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/c-testsuite/.frama-c/00206.parse/framac.ast b/c-testsuite/.frama-c/00206.parse/framac.ast
index 120c85398dc948b9bbff394cee3b676f45cd174c..ce01b0fddc12b5238b19c87a2aec8ac41eab09f6 100644
--- a/c-testsuite/.frama-c/00206.parse/framac.ast
+++ b/c-testsuite/.frama-c/00206.parse/framac.ast
@@ -3,8 +3,8 @@
 #include "stdarg.h"
 #include "stddef.h"
 #include "stdio.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17,8 +17,8 @@
  */
 int printf_va_1(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31,8 +31,8 @@ int printf_va_1(char const * restrict format, char *param0);
  */
 int printf_va_2(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -45,8 +45,8 @@ int printf_va_2(char const * restrict format, char *param0);
  */
 int printf_va_3(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -59,8 +59,8 @@ int printf_va_3(char const * restrict format, char *param0);
  */
 int printf_va_4(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/besson_blazy_wilkie_Fig_1_adapted.parse/framac.ast b/cerberus/.frama-c/besson_blazy_wilkie_Fig_1_adapted.parse/framac.ast
index c9dd913c3b6599dd3c3e298a47b306ae13158048..c5ba17d6b9c58f7dab47f1dedb5d64630b5e9c6d 100644
--- a/cerberus/.frama-c/besson_blazy_wilkie_Fig_1_adapted.parse/framac.ast
+++ b/cerberus/.frama-c/besson_blazy_wilkie_Fig_1_adapted.parse/framac.ast
@@ -35,8 +35,8 @@ int isset(int p, int flag)
  */
 int printf_va_1(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/cheri_06_mask.parse/framac.ast b/cerberus/.frama-c/cheri_06_mask.parse/framac.ast
index f00909d6f3a98d19aaf63bef37ff34fc4d9ceb70..1545fcc6415d41015d2db481a4e0239069f7e5c3 100644
--- a/cerberus/.frama-c/cheri_06_mask.parse/framac.ast
+++ b/cerberus/.frama-c/cheri_06_mask.parse/framac.ast
@@ -9,8 +9,8 @@
 #include "string.h"
 #include "strings.h"
 int x = 1;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/compcertTSO-1.parse/framac.ast b/cerberus/.frama-c/compcertTSO-1.parse/framac.ast
index e7a6f60a88619a84893ff55a54855a6ba6daec7e..7f096e223c42cf1a03ede1d415fed04f81ee9a09 100644
--- a/cerberus/.frama-c/compcertTSO-1.parse/framac.ast
+++ b/cerberus/.frama-c/compcertTSO-1.parse/framac.ast
@@ -24,8 +24,8 @@ int *g(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/compcertTSO-2.parse/framac.ast b/cerberus/.frama-c/compcertTSO-2.parse/framac.ast
index 4b0d772bb9d39dab1505a7b06a8a2fa78bc15256..bb9693800b1b1b279fac8ebfab835cc7cc041647 100644
--- a/cerberus/.frama-c/compcertTSO-2.parse/framac.ast
+++ b/cerberus/.frama-c/compcertTSO-2.parse/framac.ast
@@ -24,8 +24,8 @@ uintptr_t g(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/klw-itp14-2.parse/framac.ast b/cerberus/.frama-c/klw-itp14-2.parse/framac.ast
index bd4d477e37dc8090f4773313dd48b396a280e755..37a8fb61cc3b78cae4fa64aaecd492a682ded93e 100644
--- a/cerberus/.frama-c/klw-itp14-2.parse/framac.ast
+++ b/cerberus/.frama-c/klw-itp14-2.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int x = 1;
 int y = 2;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/null_pointer_1.parse/framac.ast b/cerberus/.frama-c/null_pointer_1.parse/framac.ast
index e66f96ceb49b85f4e3810f3852dc73abc958a55f..8620b3aead143339c26d5ff0b8718cb21cd054e4 100644
--- a/cerberus/.frama-c/null_pointer_1.parse/framac.ast
+++ b/cerberus/.frama-c/null_pointer_1.parse/framac.ast
@@ -9,9 +9,9 @@
 #include "string.h"
 #include "strings.h"
 int y = 0;
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/null_pointer_2.parse/framac.ast b/cerberus/.frama-c/null_pointer_2.parse/framac.ast
index b4c9165f81abc8366840ac704600018993e74284..1a77ea138e37f7a182b9791d1a059e3127ab1911 100644
--- a/cerberus/.frama-c/null_pointer_2.parse/framac.ast
+++ b/cerberus/.frama-c/null_pointer_2.parse/framac.ast
@@ -23,8 +23,8 @@ int y = 0;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/null_pointer_3.parse/framac.ast b/cerberus/.frama-c/null_pointer_3.parse/framac.ast
index 0f79e772b5fc454c960c0747394bb48f3004bc3f..a2436643567bcf25a63520194f3947fd7c441210 100644
--- a/cerberus/.frama-c/null_pointer_3.parse/framac.ast
+++ b/cerberus/.frama-c/null_pointer_3.parse/framac.ast
@@ -9,8 +9,8 @@
 #include "string.h"
 #include "strings.h"
 int y = 0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_1_auto.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_1_auto.parse/framac.ast
index 526e2d7886212730fc1ab8861768ac19dd9b8678..85af07a26d8a5f290b1d509383044facc37134e8 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_1_auto.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_1_auto.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_1_global.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_1_global.parse/framac.ast
index f09770ddff687c295004a350d2a22852fb3a4551..fe360d9c4cbc66a25685e7f06f5b9953d9acdd72 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_1_global.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_1_global.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int x = 1;
 float f = (float)1.0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_2_auto.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_2_auto.parse/framac.ast
index 5365af8eeb333377aa60e9cbc36ce4717b6ccb0f..54e7e73c8338654ffb6b8a79d4f23f592f95caf3 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_2_auto.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_2_auto.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_2_global.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_2_global.parse/framac.ast
index 960c3638fd73b3c1b987d878b6acbf0dabe9ee96..812b277b04ff23b009a238851a5f40b2b9ee87ee 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_2_global.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_2_global.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int x = 1;
 float f = (float)1.0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_zombie_1.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_zombie_1.parse/framac.ast
index 6fdade4da5453f8722805b1b8dbe71b4bed34a6e..d5d807319f672af48f87b744f262edf5eb394ced 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_zombie_1.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_zombie_1.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22,8 +22,8 @@
  */
 int printf_va_1(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_eq_zombie_2.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_eq_zombie_2.parse/framac.ast
index 076823971ed3206bf4a7dbaafb96db189a921fcd..49eb0d73f715be74bd707f97f07821cb2ab5361f 100644
--- a/cerberus/.frama-c/pointer_comparison_eq_zombie_2.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_eq_zombie_2.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22,8 +22,8 @@
  */
 int printf_va_1(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_rel_1_auto.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_rel_1_auto.parse/framac.ast
index f97b1fc1467cd98fa90498c07f0734e7793017d8..2bdc46843d7745645a52571c4afa0b0a05435773 100644
--- a/cerberus/.frama-c/pointer_comparison_rel_1_auto.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_rel_1_auto.parse/framac.ast
@@ -22,9 +22,9 @@
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_rel_1_global.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_rel_1_global.parse/framac.ast
index 354a331ff19781117794f2781c3de3902a73ea46..f57e76467fc3cd10118b8e36563791590d77b184 100644
--- a/cerberus/.frama-c/pointer_comparison_rel_1_global.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_rel_1_global.parse/framac.ast
@@ -24,9 +24,9 @@ int x = 1;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_rel_different_type_members.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_rel_different_type_members.parse/framac.ast
index c3297ffebcb4a552d9e7b3c50a7e6281d8c6dfc4..d9a54cf050c792593c01412d22376ad591fc9537 100644
--- a/cerberus/.frama-c/pointer_comparison_rel_different_type_members.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_rel_different_type_members.parse/framac.ast
@@ -27,8 +27,8 @@ typedef struct __anonstruct_st_1 st;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_comparison_rel_substruct.parse/framac.ast b/cerberus/.frama-c/pointer_comparison_rel_substruct.parse/framac.ast
index 864e13778a5a0d5867ccba4baba1ee28530f8cfc..2c81d439f4475fdd00a7f2d12d9db802e053bea9 100644
--- a/cerberus/.frama-c/pointer_comparison_rel_substruct.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_comparison_rel_substruct.parse/framac.ast
@@ -32,8 +32,8 @@ typedef struct __anonstruct_st2_2 st2;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_offset_xor_auto.parse/framac.ast b/cerberus/.frama-c/pointer_offset_xor_auto.parse/framac.ast
index 0c8a5eb433f6558eb88f41a97becbcb04c30daa4..3b4c42d5ba077843ee36d3090e0b3ceee13f41c5 100644
--- a/cerberus/.frama-c/pointer_offset_xor_auto.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_offset_xor_auto.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_offset_xor_global.parse/framac.ast b/cerberus/.frama-c/pointer_offset_xor_global.parse/framac.ast
index f32c31d2f20fe15c30a2130a99eb21b72f89aef4..098e5d6e9f40ba97062ea188cef21839a7832db3 100644
--- a/cerberus/.frama-c/pointer_offset_xor_global.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_offset_xor_global.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int x = 1;
 int y = 2;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_stability_1.parse/framac.ast b/cerberus/.frama-c/pointer_stability_1.parse/framac.ast
index b718a6d847eef81efeaf7a00ac90e1cb34f5cece..c89d795eb06fafac838a83a7389ad38b837b417b 100644
--- a/cerberus/.frama-c/pointer_stability_1.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_stability_1.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/pointer_stability_2.parse/framac.ast b/cerberus/.frama-c/pointer_stability_2.parse/framac.ast
index 1dfe402385f8af1ab9840bafee65e3e7abdab1b2..43c77e2460cb813e5e53ca1d1874a32c671629df 100644
--- a/cerberus/.frama-c/pointer_stability_2.parse/framac.ast
+++ b/cerberus/.frama-c/pointer_stability_2.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_auto_cu_yx_b.parse/framac.ast b/cerberus/.frama-c/provenance_equality_auto_cu_yx_b.parse/framac.ast
index c3af7ff51af55dbde3bd32f6710440680af991c8..15919bfc52c33c5473cec0986c1779faf9aa1c29 100644
--- a/cerberus/.frama-c/provenance_equality_auto_cu_yx_b.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_auto_cu_yx_b.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_auto_fn_yx.parse/framac.ast b/cerberus/.frama-c/provenance_equality_auto_fn_yx.parse/framac.ast
index 349e4780af3abe5e315e1c139670acf0d442b47a..b46929632c9791ed8286a1fc850159d601a8c45a 100644
--- a/cerberus/.frama-c/provenance_equality_auto_fn_yx.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_auto_fn_yx.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_auto_yx.parse/framac.ast b/cerberus/.frama-c/provenance_equality_auto_yx.parse/framac.ast
index d17caecabc18f62838ec9509f32d5249978cda89..ea28a7abc2cafdb2442cc2a4f6708d31d4d75bee 100644
--- a/cerberus/.frama-c/provenance_equality_auto_yx.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_auto_yx.parse/framac.ast
@@ -22,8 +22,8 @@
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_cu_xy_b.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_cu_xy_b.parse/framac.ast
index c3af7ff51af55dbde3bd32f6710440680af991c8..15919bfc52c33c5473cec0986c1779faf9aa1c29 100644
--- a/cerberus/.frama-c/provenance_equality_global_cu_xy_b.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_cu_xy_b.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_cu_yx_b.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_cu_yx_b.parse/framac.ast
index c3af7ff51af55dbde3bd32f6710440680af991c8..15919bfc52c33c5473cec0986c1779faf9aa1c29 100644
--- a/cerberus/.frama-c/provenance_equality_global_cu_yx_b.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_cu_yx_b.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_fn_xy.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_fn_xy.parse/framac.ast
index 0d3ddf64527f932c4096e260625193a2df370926..92b41460c9388b8f6b524bee6cbc04581bcad2f2 100644
--- a/cerberus/.frama-c/provenance_equality_global_fn_xy.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_fn_xy.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int x = 1;
 int y = 2;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_fn_yx.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_fn_yx.parse/framac.ast
index 9d8f5e0da3293dc91749438969deedcfc970d019..4ab598580eb5e4ba95647b286301b3f4095c5c2d 100644
--- a/cerberus/.frama-c/provenance_equality_global_fn_yx.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_fn_yx.parse/framac.ast
@@ -10,8 +10,8 @@
 #include "strings.h"
 int y = 2;
 int x = 1;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_xy.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_xy.parse/framac.ast
index faeab0d718aaa8a5fbc603b7550bb54a9a290e84..ab2860fca01125bafd44f9416c9899d35d559a51 100644
--- a/cerberus/.frama-c/provenance_equality_global_xy.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_xy.parse/framac.ast
@@ -24,8 +24,8 @@ int y = 2;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_global_yx.parse/framac.ast b/cerberus/.frama-c/provenance_equality_global_yx.parse/framac.ast
index f4726f8f6b188281afc21e14c9fe47583d9c0a33..14f5d8d50395d5f34883ab0c35fe80e36a1e4ad1 100644
--- a/cerberus/.frama-c/provenance_equality_global_yx.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_global_yx.parse/framac.ast
@@ -24,8 +24,8 @@ int x = 1;
  */
 int printf_va_1(char const * restrict format, void *param0, void *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_uintptr_t_global_xy.parse/framac.ast b/cerberus/.frama-c/provenance_equality_uintptr_t_global_xy.parse/framac.ast
index b00258516f447c516cfa2be8d2c2c1f35b33f963..fba53e695721ddabdc14ddb6623c3cf0ff5d2d5e 100644
--- a/cerberus/.frama-c/provenance_equality_uintptr_t_global_xy.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_uintptr_t_global_xy.parse/framac.ast
@@ -25,8 +25,8 @@ int y = 2;
 int printf_va_1(char const * restrict format, unsigned int param0,
                 unsigned int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_equality_uintptr_t_global_yx.parse/framac.ast b/cerberus/.frama-c/provenance_equality_uintptr_t_global_yx.parse/framac.ast
index 2f668855663b6c0f6676ab5ac21e3917bfd7f78c..35cb0cd28579de136d9ae65bda6092473b4734c6 100644
--- a/cerberus/.frama-c/provenance_equality_uintptr_t_global_yx.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_equality_uintptr_t_global_yx.parse/framac.ast
@@ -25,8 +25,8 @@ int x = 1;
 int printf_va_1(char const * restrict format, unsigned int param0,
                 unsigned int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1.parse/framac.ast b/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1.parse/framac.ast
index 6b8d4f084990b247a2e7a919b1f58862d75f37fe..0f438fc1c825c5329e29c90abbe7730300ec4e2f 100644
--- a/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1.parse/framac.ast
@@ -9,8 +9,8 @@
 #include "string.h"
 #include "strings.h"
 int x = 1;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1_no_assert.parse/framac.ast b/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1_no_assert.parse/framac.ast
index b15daa19de808973fb7ff2ea3ea4ea14a3a7848e..7a909d2452f4f3c34df107667fb2f56199b77f98 100644
--- a/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1_no_assert.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_tag_bits_via_uintptr_t_1_no_assert.parse/framac.ast
@@ -9,8 +9,8 @@
 #include "string.h"
 #include "strings.h"
 int x = 1;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_via_io_auto.parse/framac.ast b/cerberus/.frama-c/provenance_via_io_auto.parse/framac.ast
index 55f6edc74ebd65510a92354793c33188f83ff83c..88d5a01ec0a306adb26c699abd7f8c597fcf1ab8 100644
--- a/cerberus/.frama-c/provenance_via_io_auto.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_via_io_auto.parse/framac.ast
@@ -36,8 +36,8 @@ int printf_va_1(char const * restrict format, unsigned int param0,
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, stream->__fc_FILE_data, *param0;
     assigns \result
@@ -67,9 +67,9 @@ int fscanf_va_1(FILE * restrict stream, char const * restrict format,
  */
 int printf_va_2(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param3);
     requires valid_read_string(param4);
-    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_via_io_bytewise_global.parse/framac.ast b/cerberus/.frama-c/provenance_via_io_bytewise_global.parse/framac.ast
index 777891cd05d5daf6e46d64f1fae96c0d5639d7bf..7f3a848153c61ac67c01eeab3e39efd06b14b2be 100644
--- a/cerberus/.frama-c/provenance_via_io_bytewise_global.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_via_io_bytewise_global.parse/framac.ast
@@ -35,9 +35,9 @@ int printf_va_1(char const * restrict format, void *param0);
  */
 int printf_va_2(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param2);
     requires valid_read_string(param3);
-    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_via_io_global.parse/framac.ast b/cerberus/.frama-c/provenance_via_io_global.parse/framac.ast
index f042d403620d340761fd8bb53c4171e284ad19fd..01cc140d9721a5dc173d8f31eb5d17aa8eee7acf 100644
--- a/cerberus/.frama-c/provenance_via_io_global.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_via_io_global.parse/framac.ast
@@ -38,8 +38,8 @@ int printf_va_1(char const * restrict format, unsigned int param0,
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, stream->__fc_FILE_data, *param0;
     assigns \result
@@ -69,9 +69,9 @@ int fscanf_va_1(FILE * restrict stream, char const * restrict format,
  */
 int printf_va_2(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param3);
     requires valid_read_string(param4);
-    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_via_io_percentp_global.parse/framac.ast b/cerberus/.frama-c/provenance_via_io_percentp_global.parse/framac.ast
index 4f11163811c6c04db2537d1aa4286d9754801a70..3edcc31670e42ea1901671334b029783e36b5e13 100644
--- a/cerberus/.frama-c/provenance_via_io_percentp_global.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_via_io_percentp_global.parse/framac.ast
@@ -35,8 +35,8 @@ int printf_va_1(char const * restrict format, void *param0);
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  void *param0);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, stream->__fc_FILE_data, *param0;
     assigns \result
@@ -66,9 +66,9 @@ int fscanf_va_1(FILE * restrict stream, char const * restrict format,
  */
 int printf_va_2(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param2);
     requires valid_read_string(param3);
-    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/provenance_via_io_uintptr_t_global.parse/framac.ast b/cerberus/.frama-c/provenance_via_io_uintptr_t_global.parse/framac.ast
index be799be9c04f7f958f34aea42d9c202809f0becd..1bf18d8b1deb707075367187313326f46c985fca 100644
--- a/cerberus/.frama-c/provenance_via_io_uintptr_t_global.parse/framac.ast
+++ b/cerberus/.frama-c/provenance_via_io_uintptr_t_global.parse/framac.ast
@@ -35,8 +35,8 @@ int printf_va_1(char const * restrict format, unsigned int param0);
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, stream->__fc_FILE_data, *param0;
     assigns \result
@@ -66,9 +66,9 @@ int fscanf_va_1(FILE * restrict stream, char const * restrict format,
  */
 int printf_va_2(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param2);
     requires valid_read_string(param3);
-    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/unspecified_value_strictness_int.parse/framac.ast b/cerberus/.frama-c/unspecified_value_strictness_int.parse/framac.ast
index 5eaf45e61795a54d49fdb58ef0a623d0d8c6ebf5..736ef44117935c99b2a37d6c6be1f51129652b13 100644
--- a/cerberus/.frama-c/unspecified_value_strictness_int.parse/framac.ast
+++ b/cerberus/.frama-c/unspecified_value_strictness_int.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/cerberus/.frama-c/unspecified_value_strictness_unsigned_char.parse/framac.ast b/cerberus/.frama-c/unspecified_value_strictness_unsigned_char.parse/framac.ast
index 1379a1cdf592c0e14f83f87aafebb8ebf45a2506..99573b2b28f21888dfc7a79362a16f3dfac810d3 100644
--- a/cerberus/.frama-c/unspecified_value_strictness_unsigned_char.parse/framac.ast
+++ b/cerberus/.frama-c/unspecified_value_strictness_unsigned_char.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "stdlib.h"
 #include "string.h"
 #include "strings.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/chrony/.frama-c/chrony-ntp-core.eva/alarms.csv b/chrony/.frama-c/chrony-ntp-core.eva/alarms.csv
index 3cb5d9b89e68f3b0954858d90167f47f8604cc94..945e0070ccc55d6e43be61383c3adda222aeadfc 100644
--- a/chrony/.frama-c/chrony-ntp-core.eva/alarms.csv
+++ b/chrony/.frama-c/chrony-ntp-core.eva/alarms.csv
@@ -55,46 +55,26 @@ directory	file	line	function	property kind	status	property
 .	cmdmon.h	37	CAM_AddAccessRestriction	from clause	Unknown	assigns \result \from *ip_addr, subnet_bits, allow, all;
 .	cmdparse.c	82	CPS_ParseNTPSourceAdd	mem_access	Unknown	\valid_read(line)
 .	cmdparse.c	104	CPS_ParseNTPSourceAdd	precondition of sscanf_va_18	Unknown	valid_read_string(s)
-.	cmdparse.c	104	sscanf_va_18	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	108	CPS_ParseNTPSourceAdd	precondition of sscanf_va_17	Unknown	valid_read_string(s)
-.	cmdparse.c	108	sscanf_va_17	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	111	CPS_ParseNTPSourceAdd	precondition of sscanf_va_16	Unknown	valid_read_string(s)
-.	cmdparse.c	111	sscanf_va_16	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	114	CPS_ParseNTPSourceAdd	precondition of sscanf_va_15	Unknown	valid_read_string(s)
-.	cmdparse.c	114	sscanf_va_15	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	117	CPS_ParseNTPSourceAdd	precondition of sscanf_va_14	Unknown	valid_read_string(s)
-.	cmdparse.c	117	sscanf_va_14	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	120	CPS_ParseNTPSourceAdd	precondition of sscanf_va_13	Unknown	valid_read_string(s)
-.	cmdparse.c	120	sscanf_va_13	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	123	CPS_ParseNTPSourceAdd	precondition of sscanf_va_12	Unknown	valid_read_string(s)
-.	cmdparse.c	123	sscanf_va_12	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	126	CPS_ParseNTPSourceAdd	precondition of sscanf_va_11	Unknown	valid_read_string(s)
-.	cmdparse.c	126	sscanf_va_11	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	129	CPS_ParseNTPSourceAdd	precondition of sscanf_va_10	Unknown	valid_read_string(s)
-.	cmdparse.c	129	sscanf_va_10	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	132	CPS_ParseNTPSourceAdd	precondition of sscanf_va_9	Unknown	valid_read_string(s)
-.	cmdparse.c	132	sscanf_va_9	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	135	CPS_ParseNTPSourceAdd	precondition of sscanf_va_8	Unknown	valid_read_string(s)
-.	cmdparse.c	135	sscanf_va_8	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	138	CPS_ParseNTPSourceAdd	precondition of sscanf_va_7	Unknown	valid_read_string(s)
-.	cmdparse.c	138	sscanf_va_7	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	141	CPS_ParseNTPSourceAdd	precondition of sscanf_va_6	Unknown	valid_read_string(s)
-.	cmdparse.c	141	sscanf_va_6	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	144	CPS_ParseNTPSourceAdd	precondition of sscanf_va_5	Unknown	valid_read_string(s)
-.	cmdparse.c	144	sscanf_va_5	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	147	CPS_ParseNTPSourceAdd	precondition of sscanf_va_4	Unknown	valid_read_string(s)
-.	cmdparse.c	147	sscanf_va_4	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	150	CPS_ParseNTPSourceAdd	precondition of sscanf_va_3	Unknown	valid_read_string(s)
-.	cmdparse.c	150	sscanf_va_3	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	153	CPS_ParseNTPSourceAdd	precondition of sscanf_va_2	Unknown	valid_read_string(s)
-.	cmdparse.c	153	sscanf_va_2	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	156	CPS_ParseNTPSourceAdd	precondition of sscanf_va_1	Unknown	valid_read_string(s)
-.	cmdparse.c	156	sscanf_va_1	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	180	CPS_ParseLocal	mem_access	Unknown	\valid_read(line)
 .	cmdparse.c	185	CPS_ParseLocal	precondition of sscanf_va_20	Unknown	valid_read_string(s)
-.	cmdparse.c	185	sscanf_va_20	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	192	CPS_ParseLocal	precondition of sscanf_va_19	Unknown	valid_read_string(s)
-.	cmdparse.c	192	sscanf_va_19	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	213	CPS_NormalizeLine	initialization	Unknown	\initialized(p)
 .	cmdparse.c	213	CPS_NormalizeLine	mem_access	Unknown	\valid_read(p)
 .	cmdparse.c	216	CPS_NormalizeLine	mem_access	Unknown	\valid(tmp)
@@ -115,7 +95,6 @@ directory	file	line	function	property kind	status	property
 .	cmdparse.c	274	CPS_ParseKey	initialization	Unknown	\initialized(s2)
 .	cmdparse.c	274	CPS_ParseKey	initialization	Unknown	\initialized(s4)
 .	cmdparse.c	277	CPS_ParseKey	precondition of sscanf_va_21	Unknown	valid_read_string(s)
-.	cmdparse.c	277	sscanf_va_21	precondition	Unknown	valid_read_string(s)
 .	cmdparse.c	280	CPS_ParseKey	initialization	Unknown	\initialized(s3)
 .	conf.c	298	get_number_of_args	mem_access	Unknown	\valid_read(line)
 .	conf.c	300	get_number_of_args	mem_access	Unknown	\valid_read(line)
@@ -126,52 +105,34 @@ directory	file	line	function	property kind	status	property
 .	conf.c	368	CNF_Finalise	initialization	Unknown	\initialized(&((NTP_Source *)tmp_1)->params.name)
 .	conf.c	368	CNF_Finalise	mem_access	Unknown	\valid_read(&((NTP_Source *)tmp_1)->params.name)
 .	conf.c	601	parse_int	precondition of sscanf_va_22	Unknown	valid_read_string(s)
-.	conf.c	601	sscanf_va_22	precondition	Unknown	valid_read_string(s)
 .	conf.c	614	parse_double	precondition of sscanf_va_23	Unknown	valid_read_string(s)
-.	conf.c	614	sscanf_va_23	precondition	Unknown	valid_read_string(s)
 .	conf.c	645	parse_source	initialization	Unknown	\initialized(&source.params.name)
 .	conf.c	659	parse_ratelimit	mem_access	Unknown	\valid_read(line)
 .	conf.c	662	parse_ratelimit	precondition of sscanf_va_24	Unknown	valid_read_string(s)
-.	conf.c	662	sscanf_va_24	precondition	Unknown	valid_read_string(s)
 .	conf.c	729	parse_refclock	mem_access	Unknown	\valid_read(cmd)
 .	conf.c	733	parse_refclock	precondition of sscanf_va_39	Unknown	valid_read_string(s)
-.	conf.c	733	sscanf_va_39	precondition	Unknown	valid_read_string(s)
 .	conf.c	735	parse_refclock	initialization	Unknown	\initialized(&ref[1])
 .	conf.c	735	parse_refclock	initialization	Unknown	\initialized(&ref[2])
 .	conf.c	735	parse_refclock	initialization	Unknown	\initialized(&ref[3])
 .	conf.c	735	parse_refclock	initialization	Unknown	\initialized((unsigned char *)ref)
 .	conf.c	737	parse_refclock	precondition of sscanf_va_38	Unknown	valid_read_string(s)
-.	conf.c	737	sscanf_va_38	precondition	Unknown	valid_read_string(s)
 .	conf.c	739	parse_refclock	initialization	Unknown	\initialized(&ref[1])
 .	conf.c	739	parse_refclock	initialization	Unknown	\initialized(&ref[2])
 .	conf.c	739	parse_refclock	initialization	Unknown	\initialized(&ref[3])
 .	conf.c	739	parse_refclock	initialization	Unknown	\initialized((unsigned char *)ref)
 .	conf.c	741	parse_refclock	precondition of sscanf_va_37	Unknown	valid_read_string(s)
-.	conf.c	741	sscanf_va_37	precondition	Unknown	valid_read_string(s)
 .	conf.c	745	parse_refclock	precondition of sscanf_va_36	Unknown	valid_read_string(s)
-.	conf.c	745	sscanf_va_36	precondition	Unknown	valid_read_string(s)
 .	conf.c	749	parse_refclock	precondition of sscanf_va_35	Unknown	valid_read_string(s)
-.	conf.c	749	sscanf_va_35	precondition	Unknown	valid_read_string(s)
 .	conf.c	753	parse_refclock	precondition of sscanf_va_34	Unknown	valid_read_string(s)
-.	conf.c	753	sscanf_va_34	precondition	Unknown	valid_read_string(s)
 .	conf.c	756	parse_refclock	precondition of sscanf_va_33	Unknown	valid_read_string(s)
-.	conf.c	756	sscanf_va_33	precondition	Unknown	valid_read_string(s)
 .	conf.c	759	parse_refclock	precondition of sscanf_va_32	Unknown	valid_read_string(s)
-.	conf.c	759	sscanf_va_32	precondition	Unknown	valid_read_string(s)
 .	conf.c	762	parse_refclock	precondition of sscanf_va_31	Unknown	valid_read_string(s)
-.	conf.c	762	sscanf_va_31	precondition	Unknown	valid_read_string(s)
 .	conf.c	765	parse_refclock	precondition of sscanf_va_30	Unknown	valid_read_string(s)
-.	conf.c	765	sscanf_va_30	precondition	Unknown	valid_read_string(s)
 .	conf.c	768	parse_refclock	precondition of sscanf_va_29	Unknown	valid_read_string(s)
-.	conf.c	768	sscanf_va_29	precondition	Unknown	valid_read_string(s)
 .	conf.c	774	parse_refclock	precondition of sscanf_va_28	Unknown	valid_read_string(s)
-.	conf.c	774	sscanf_va_28	precondition	Unknown	valid_read_string(s)
 .	conf.c	777	parse_refclock	precondition of sscanf_va_27	Unknown	valid_read_string(s)
-.	conf.c	777	sscanf_va_27	precondition	Unknown	valid_read_string(s)
 .	conf.c	780	parse_refclock	precondition of sscanf_va_26	Unknown	valid_read_string(s)
-.	conf.c	780	sscanf_va_26	precondition	Unknown	valid_read_string(s)
 .	conf.c	787	parse_refclock	precondition of sscanf_va_25	Unknown	valid_read_string(s)
-.	conf.c	787	sscanf_va_25	precondition	Unknown	valid_read_string(s)
 .	conf.c	813	parse_refclock	mem_access	Unknown	\valid(&refclock->driver_name)
 .	conf.c	814	parse_refclock	mem_access	Unknown	\valid(&refclock->driver_parameter)
 .	conf.c	815	parse_refclock	mem_access	Unknown	\valid(&refclock->driver_poll)
@@ -193,24 +154,17 @@ directory	file	line	function	property kind	status	property
 .	conf.c	831	parse_refclock	mem_access	Unknown	\valid(&refclock->max_lock_age)
 .	conf.c	832	parse_refclock	mem_access	Unknown	\valid(&refclock->lock_ref_id)
 .	conf.c	896	parse_initstepslew	precondition of sscanf_va_40	Unknown	valid_read_string(s)
-.	conf.c	896	sscanf_va_40	precondition	Unknown	valid_read_string(s)
 .	conf.c	937	parse_clientloglimit	precondition of sscanf_va_41	Unknown	valid_read_string(s)
-.	conf.c	937	sscanf_va_41	precondition	Unknown	valid_read_string(s)
 .	conf.c	948	parse_fallbackdrift	precondition of sscanf_va_42	Unknown	valid_read_string(s)
-.	conf.c	948	sscanf_va_42	precondition	Unknown	valid_read_string(s)
 .	conf.c	959	parse_makestep	precondition of sscanf_va_43	Unknown	valid_read_string(s)
-.	conf.c	959	sscanf_va_43	precondition	Unknown	valid_read_string(s)
 .	conf.c	976	parse_maxchange	precondition of sscanf_va_44	Unknown	valid_read_string(s)
-.	conf.c	976	sscanf_va_44	precondition	Unknown	valid_read_string(s)
 .	conf.c	992	parse_mailonchange	precondition of sscanf_va_45	Unknown	valid_read_string(s)
-.	conf.c	992	sscanf_va_45	precondition	Unknown	valid_read_string(s)
 .	conf.c	1021	parse_allow_deny	mem_access	Unknown	\valid(&new_node->allow)
 .	conf.c	1022	parse_allow_deny	mem_access	Unknown	\valid(&new_node->all)
 .	conf.c	1023	parse_allow_deny	mem_access	Unknown	\valid(&new_node->ip.family)
 .	conf.c	1024	parse_allow_deny	mem_access	Unknown	\valid(&new_node->subnet_bits)
 .	conf.c	1027	parse_allow_deny	precondition of strchr	Unknown	valid_string_s: valid_read_string(s)
 .	conf.c	1033	parse_allow_deny	precondition of sscanf_va_46	Unknown	valid_read_string(s)
-.	conf.c	1033	sscanf_va_46	precondition	Unknown	valid_read_string(s)
 .	conf.c	1036	parse_allow_deny	user assertion	Unknown	n ≤ 4
 .	conf.c	1038	parse_allow_deny	mem_access	Unknown	\valid(&new_node->allow)
 .	conf.c	1039	parse_allow_deny	mem_access	Unknown	\valid(&new_node->all)
@@ -231,7 +185,6 @@ directory	file	line	function	property kind	status	property
 .	conf.c	1069	parse_allow_deny	mem_access	Unknown	\valid(&new_node->ip.addr.in4)
 .	conf.c	1070	parse_allow_deny	mem_access	Unknown	\valid(&new_node->subnet_bits)
 .	conf.c	1079	parse_allow_deny	precondition of sscanf_va_47	Unknown	valid_read_string(s)
-.	conf.c	1079	sscanf_va_47	precondition	Unknown	valid_read_string(s)
 .	conf.c	1081	parse_allow_deny	mem_access	Unknown	\valid(&new_node->subnet_bits)
 .	conf.c	1090	parse_allow_deny	mem_access	Unknown	\valid(&new_node->allow)
 .	conf.c	1091	parse_allow_deny	mem_access	Unknown	\valid(&new_node->all)
@@ -242,18 +195,13 @@ directory	file	line	function	property kind	status	property
 .	conf.c	1131	parse_bindaddress	initialization	Unknown	\initialized(&ip.family)
 .	conf.c	1156	parse_bindcmdaddress	initialization	Unknown	\initialized(&ip.family)
 .	conf.c	1180	parse_broadcast	precondition of sscanf_va_48	Unknown	valid_read_string(s)
-.	conf.c	1180	sscanf_va_48	precondition	Unknown	valid_read_string(s)
 .	conf.c	1197	parse_broadcast	precondition of sscanf_va_49	Unknown	valid_read_string(s)
-.	conf.c	1197	sscanf_va_49	precondition	Unknown	valid_read_string(s)
 .	conf.c	1207	parse_broadcast	mem_access	Unknown	\valid(&destination->addr)
 .	conf.c	1208	parse_broadcast	mem_access	Unknown	\valid(&destination->port)
 .	conf.c	1209	parse_broadcast	mem_access	Unknown	\valid(&destination->interval)
 .	conf.c	1220	parse_smoothtime	precondition of sscanf_va_50	Unknown	valid_read_string(s)
-.	conf.c	1220	sscanf_va_50	precondition	Unknown	valid_read_string(s)
 .	conf.c	1259	parse_tempcomp	precondition of sscanf_va_51	Unknown	valid_read_string(s)
-.	conf.c	1259	sscanf_va_51	precondition	Unknown	valid_read_string(s)
 .	conf.c	1265	parse_tempcomp	precondition of sscanf_va_52	Unknown	valid_read_string(s)
-.	conf.c	1265	sscanf_va_52	precondition	Unknown	valid_read_string(s)
 .	conf.c	1295	parse_hwtimestamp	mem_access	Unknown	\valid(&iface->name)
 .	conf.c	1296	parse_hwtimestamp	mem_access	Unknown	\valid(&iface->minpoll)
 .	conf.c	1297	parse_hwtimestamp	mem_access	Unknown	\valid(&iface->min_samples)
@@ -266,30 +214,17 @@ directory	file	line	function	property kind	status	property
 .	conf.c	1305	parse_hwtimestamp	mem_access	Unknown	\valid_read(p)
 .	conf.c	1309	parse_hwtimestamp	precondition of sscanf_va_59	Unknown	\valid(param0)
 .	conf.c	1309	parse_hwtimestamp	precondition of sscanf_va_59	Unknown	valid_read_string(s)
-.	conf.c	1309	sscanf_va_59	precondition	Unknown	\valid(param0)
-.	conf.c	1309	sscanf_va_59	precondition	Unknown	valid_read_string(s)
 .	conf.c	1312	parse_hwtimestamp	precondition of sscanf_va_58	Unknown	\valid(param0)
 .	conf.c	1312	parse_hwtimestamp	precondition of sscanf_va_58	Unknown	valid_read_string(s)
-.	conf.c	1312	sscanf_va_58	precondition	Unknown	\valid(param0)
-.	conf.c	1312	sscanf_va_58	precondition	Unknown	valid_read_string(s)
 .	conf.c	1315	parse_hwtimestamp	precondition of sscanf_va_57	Unknown	\valid(param0)
 .	conf.c	1315	parse_hwtimestamp	precondition of sscanf_va_57	Unknown	valid_read_string(s)
-.	conf.c	1315	sscanf_va_57	precondition	Unknown	\valid(param0)
-.	conf.c	1315	sscanf_va_57	precondition	Unknown	valid_read_string(s)
 .	conf.c	1318	parse_hwtimestamp	precondition of sscanf_va_56	Unknown	\valid(param0)
 .	conf.c	1318	parse_hwtimestamp	precondition of sscanf_va_56	Unknown	valid_read_string(s)
-.	conf.c	1318	sscanf_va_56	precondition	Unknown	\valid(param0)
-.	conf.c	1318	sscanf_va_56	precondition	Unknown	valid_read_string(s)
 .	conf.c	1321	parse_hwtimestamp	precondition of sscanf_va_55	Unknown	\valid(param0)
 .	conf.c	1321	parse_hwtimestamp	precondition of sscanf_va_55	Unknown	valid_read_string(s)
-.	conf.c	1321	sscanf_va_55	precondition	Unknown	\valid(param0)
-.	conf.c	1321	sscanf_va_55	precondition	Unknown	valid_read_string(s)
 .	conf.c	1324	parse_hwtimestamp	precondition of sscanf_va_54	Unknown	\valid(param0)
 .	conf.c	1324	parse_hwtimestamp	precondition of sscanf_va_54	Unknown	valid_read_string(s)
-.	conf.c	1324	sscanf_va_54	precondition	Unknown	\valid(param0)
-.	conf.c	1324	sscanf_va_54	precondition	Unknown	valid_read_string(s)
 .	conf.c	1327	parse_hwtimestamp	precondition of sscanf_va_53	Unknown	valid_read_string(s)
-.	conf.c	1327	sscanf_va_53	precondition	Unknown	valid_read_string(s)
 .	conf.c	1795	CNF_SetupAccessRestrictions	initialization	Unknown	\initialized(&node->all)
 .	conf.c	1795	CNF_SetupAccessRestrictions	initialization	Unknown	\initialized(&node->allow)
 .	conf.c	1795	CNF_SetupAccessRestrictions	initialization	Unknown	\initialized(&node->subnet_bits)
@@ -455,9 +390,7 @@ directory	file	line	function	property kind	status	property
 .	reference.c	478	schedule_fb_drift	mem_access	Unknown	\valid_read(&(fb_drifts + (int)(c - fb_drift_min_0))->freq)
 .	reference.c	478	schedule_fb_drift	signed_overflow	Unknown	c - fb_drift_min_0 ≤ 2147483647
 .	reference.c	526	maybe_log_offset	precondition of popen	Unknown	valid_command: valid_read_string(command)
-.	reference.c	533	fprintf_va_3	precondition	Unknown	valid_read_string(param0)
 .	reference.c	533	maybe_log_offset	precondition of fprintf_va_3	Unknown	valid_read_string(param0)
-.	reference.c	534	fprintf_va_4	precondition	Unknown	valid_read_string(param0)
 .	reference.c	534	maybe_log_offset	precondition of fprintf_va_4	Unknown	valid_read_string(param0)
 .	reference.c	541	maybe_log_offset	precondition of fputs	Unknown	valid_string_s: valid_read_string(s)
 .	reference.c	551	maybe_log_offset	precondition of pclose	Unknown	open_pipe: is_open_pipe(stream)
@@ -798,9 +731,7 @@ directory	file	line	function	property kind	status	property
 .	util.c	310	UTI_IPToString	mem_access	Unknown	\valid_read(ip6 + (unsigned long)((unsigned long)(2 * a) + 1))
 .	util.c	310	UTI_IPToString	mem_access	Unknown	\valid_read(ip6 + (unsigned long)(2 * a))
 .	util.c	310	UTI_IPToString	precondition of snprintf_va_10	Unknown	\valid(s + (0 .. n - 1)) ∨ \valid(s + (0 .. format_length(format) - 1))
-.	util.c	310	snprintf_va_10	precondition	Unknown	\valid(s + (0 .. n - 1)) ∨ \valid(s + (0 .. format_length(format) - 1))
 .	util.c	345	UTI_StringToIP	precondition of sscanf_va_63	Unknown	valid_read_string(s)
-.	util.c	345	sscanf_va_63	precondition	Unknown	valid_read_string(s)
 .	util.c	680	UTI_DoubleToNtp32	is_nan_or_infinite	Unknown	\is_finite(x)
 .	util.c	764	UTI_TimespecToNtp64	float_to_int	Unknown	-1 < 4.294967296 * (double)nsec
 .	util.c	764	UTI_TimespecToNtp64	float_to_int	Unknown	4.294967296 * (double)nsec < 4294967296
@@ -815,6 +746,75 @@ FRAMAC_SHARE/libc	netdb.c	147	gethostbyname	precondition of inet_addr	Unknown	va
 FRAMAC_SHARE/libc	stdio.h	83	rename	precondition	Unknown	valid_old_name: valid_read_string(old_name)
 FRAMAC_SHARE/libc	stdio.h	84	rename	precondition	Unknown	valid_new_name: valid_read_string(new_name)
 FRAMAC_SHARE/libc	stdio.h	150	fopen	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_3	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	213	snprintf_va_10	precondition	Unknown	\valid(s + (0 .. n - 1)) ∨ \valid(s + (0 .. format_length(format) - 1))
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_1	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_10	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_11	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_12	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_13	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_14	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_15	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_16	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_17	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_18	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_19	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_2	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_20	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_21	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_22	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_23	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_24	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_25	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_26	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_27	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_28	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_29	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_3	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_30	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_31	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_32	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_33	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_34	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_35	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_36	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_37	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_38	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_39	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_4	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_40	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_41	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_42	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_43	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_44	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_45	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_46	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_47	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_48	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_49	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_5	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_50	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_51	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_52	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_53	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_54	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_54	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_55	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_55	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_56	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_56	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_57	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_57	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_58	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_58	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_59	precondition	Unknown	\valid(param0)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_59	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_6	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_63	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_7	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_8	precondition	Unknown	valid_read_string(s)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_9	precondition	Unknown	valid_read_string(s)
 FRAMAC_SHARE/libc	stdio.h	288	fputs	precondition	Unknown	valid_string_s: valid_read_string(s)
 FRAMAC_SHARE/libc	stdio.h	351	fread	precondition	Unknown	valid_ptr_block: \valid((char *)ptr + (0 .. nmemb * size - 1))
 FRAMAC_SHARE/libc	stdio.h	551	popen	precondition	Unknown	valid_command: valid_read_string(command)
@@ -853,8 +853,8 @@ FRAMAC_SHARE/libc	string.h	108	memmove	precondition	Unknown	valid_src: valid_rea
 FRAMAC_SHARE/libc	string.h	118	memset	precondition	Unknown	valid_s: valid_or_empty(s, n)
 FRAMAC_SHARE/libc	string.h	128	strlen	precondition	Unknown	valid_string_s: valid_read_string(s)
 FRAMAC_SHARE/libc	string.h	160	strchr	precondition	Unknown	valid_string_s: valid_read_string(s)
-FRAMAC_SHARE/libc	unistd.h	774	chown	precondition	Unknown	valid_string_path: valid_read_string(path)
-FRAMAC_SHARE/libc	unistd.h	1123	unlink	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	775	chown	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	1124	unlink	precondition	Unknown	valid_string_path: valid_read_string(path)
 FRAMAC_SHARE/libc/sys	stat.h	32	chmod	assigns clause	Unknown	assigns \nothing;
 FRAMAC_SHARE/libc/sys	stat.h	32	chmod	from clause	Unknown	assigns \result \from \nothing;
 FRAMAC_SHARE/libc/sys	stat.h	87	stat	precondition	Unknown	valid_pathname: valid_read_string(pathname)
diff --git a/chrony/.frama-c/chrony-ntp-core.parse/framac.ast b/chrony/.frama-c/chrony-ntp-core.parse/framac.ast
index 6aa06c665e3bc0c79d20a6d7b4daebae8d6bd774..fb742a698f97dd660e87ec5099c0a281062fd427 100644
--- a/chrony/.frama-c/chrony-ntp-core.parse/framac.ast
+++ b/chrony/.frama-c/chrony-ntp-core.parse/framac.ast
@@ -915,8 +915,8 @@ void TST_Fail(int line)
  */
 int fprintf_va_1(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2570,12 +2570,12 @@ int DNS_IPAddress2Name(IPAddr *ip_addr, char *name, int len);
 
 void DNS_Reload(void);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2587,12 +2587,12 @@ void DNS_Reload(void);
 int sscanf_va_1(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2604,12 +2604,12 @@ int sscanf_va_1(char const * restrict s, char const * restrict format,
 int sscanf_va_2(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2621,12 +2621,12 @@ int sscanf_va_2(char const * restrict s, char const * restrict format,
 int sscanf_va_3(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2638,12 +2638,12 @@ int sscanf_va_3(char const * restrict s, char const * restrict format,
 int sscanf_va_4(char const * restrict s, char const * restrict format,
                 unsigned short *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2655,12 +2655,12 @@ int sscanf_va_4(char const * restrict s, char const * restrict format,
 int sscanf_va_5(char const * restrict s, char const * restrict format,
                 double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2672,12 +2672,12 @@ int sscanf_va_5(char const * restrict s, char const * restrict format,
 int sscanf_va_6(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2689,12 +2689,12 @@ int sscanf_va_6(char const * restrict s, char const * restrict format,
 int sscanf_va_7(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2706,12 +2706,12 @@ int sscanf_va_7(char const * restrict s, char const * restrict format,
 int sscanf_va_8(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2723,12 +2723,12 @@ int sscanf_va_8(char const * restrict s, char const * restrict format,
 int sscanf_va_9(char const * restrict s, char const * restrict format,
                 double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2740,12 +2740,12 @@ int sscanf_va_9(char const * restrict s, char const * restrict format,
 int sscanf_va_10(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2757,12 +2757,12 @@ int sscanf_va_10(char const * restrict s, char const * restrict format,
 int sscanf_va_11(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2774,12 +2774,12 @@ int sscanf_va_11(char const * restrict s, char const * restrict format,
 int sscanf_va_12(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2791,12 +2791,12 @@ int sscanf_va_12(char const * restrict s, char const * restrict format,
 int sscanf_va_13(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2808,12 +2808,12 @@ int sscanf_va_13(char const * restrict s, char const * restrict format,
 int sscanf_va_14(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2825,12 +2825,12 @@ int sscanf_va_14(char const * restrict s, char const * restrict format,
 int sscanf_va_15(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2842,12 +2842,12 @@ int sscanf_va_15(char const * restrict s, char const * restrict format,
 int sscanf_va_16(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2859,12 +2859,12 @@ int sscanf_va_16(char const * restrict s, char const * restrict format,
 int sscanf_va_17(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3258,12 +3258,12 @@ int CPS_ParseNTPSourceAdd(char *line, CPS_NTP_Source *src)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3275,12 +3275,12 @@ int CPS_ParseNTPSourceAdd(char *line, CPS_NTP_Source *src)
 int sscanf_va_19(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3436,9 +3436,9 @@ char *CPS_SplitWord(char *line)
   return q;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4521,9 +4521,9 @@ static int parse_string(char *line, char **result)
   return __retres;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4549,9 +4549,9 @@ static int parse_int(char *line, int *result)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4601,12 +4601,12 @@ static void parse_source(char *line, NTP_Source_Type type, int pool)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4652,12 +4652,12 @@ static void parse_ratelimit(char *line, int *enabled_0, int *interval,
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4669,12 +4669,12 @@ static void parse_ratelimit(char *line, int *enabled_0, int *interval,
 int sscanf_va_25(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4686,12 +4686,12 @@ int sscanf_va_25(char const * restrict s, char const * restrict format,
 int sscanf_va_26(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4703,12 +4703,12 @@ int sscanf_va_26(char const * restrict s, char const * restrict format,
 int sscanf_va_27(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4720,12 +4720,12 @@ int sscanf_va_27(char const * restrict s, char const * restrict format,
 int sscanf_va_28(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4737,12 +4737,12 @@ int sscanf_va_28(char const * restrict s, char const * restrict format,
 int sscanf_va_29(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4754,12 +4754,12 @@ int sscanf_va_29(char const * restrict s, char const * restrict format,
 int sscanf_va_30(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4771,12 +4771,12 @@ int sscanf_va_30(char const * restrict s, char const * restrict format,
 int sscanf_va_31(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4788,12 +4788,12 @@ int sscanf_va_31(char const * restrict s, char const * restrict format,
 int sscanf_va_32(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4805,12 +4805,12 @@ int sscanf_va_32(char const * restrict s, char const * restrict format,
 int sscanf_va_33(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4822,12 +4822,12 @@ int sscanf_va_33(char const * restrict s, char const * restrict format,
 int sscanf_va_34(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4839,12 +4839,12 @@ int sscanf_va_34(char const * restrict s, char const * restrict format,
 int sscanf_va_35(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4856,12 +4856,12 @@ int sscanf_va_35(char const * restrict s, char const * restrict format,
 int sscanf_va_36(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4873,9 +4873,9 @@ int sscanf_va_36(char const * restrict s, char const * restrict format,
 int sscanf_va_37(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -4888,9 +4888,9 @@ int sscanf_va_37(char const * restrict s, char const * restrict format,
 int sscanf_va_38(char const * restrict s, char const * restrict format,
                  char *param0, int *param1);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -5272,9 +5272,9 @@ static void parse_local(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5345,9 +5345,9 @@ static void parse_leapsecmode(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5367,12 +5367,12 @@ static void parse_clientloglimit(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5393,12 +5393,12 @@ static void parse_fallbackdrift(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5425,14 +5425,14 @@ static void parse_makestep(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
     assigns \result, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5459,9 +5459,9 @@ static void parse_maxchange(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5489,16 +5489,16 @@ static void parse_mailonchange(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5515,9 +5515,9 @@ int sscanf_va_46(char const * restrict s, char const * restrict format,
                  unsigned long *param0, unsigned long *param1,
                  unsigned long *param2, unsigned long *param3);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5689,9 +5689,9 @@ static void parse_bindcmdaddress(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5702,9 +5702,9 @@ static void parse_bindcmdaddress(char *line)
 int sscanf_va_48(char const * restrict s, char const * restrict format,
                  int *param0);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5760,12 +5760,12 @@ static void parse_broadcast(char *line)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5801,9 +5801,9 @@ static void parse_smoothtime(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5814,18 +5814,18 @@ static void parse_smoothtime(char *line)
 int sscanf_va_51(char const * restrict s, char const * restrict format,
                  double *param0);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
     assigns \result, *param4, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5886,9 +5886,9 @@ static void parse_tempcomp(char *line)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -5901,12 +5901,12 @@ static void parse_tempcomp(char *line)
 int sscanf_va_53(char const * restrict s, char const * restrict format,
                  char *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5918,12 +5918,12 @@ int sscanf_va_53(char const * restrict s, char const * restrict format,
 int sscanf_va_54(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5935,12 +5935,12 @@ int sscanf_va_54(char const * restrict s, char const * restrict format,
 int sscanf_va_55(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5952,12 +5952,12 @@ int sscanf_va_55(char const * restrict s, char const * restrict format,
 int sscanf_va_56(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5969,12 +5969,12 @@ int sscanf_va_56(char const * restrict s, char const * restrict format,
 int sscanf_va_57(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5986,12 +5986,12 @@ int sscanf_va_57(char const * restrict s, char const * restrict format,
 int sscanf_va_58(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -8368,11 +8368,11 @@ DNS_Status DNS_Name2IPAddress(char const *name, IPAddr *ip_addrs,
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -9091,11 +9091,11 @@ static void handle_slew(struct timespec *raw, struct timespec *cooked,
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, stream->__fc_FILE_data, *param1, *param0;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -9480,11 +9480,11 @@ static void end_ref_mode(int result)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -9495,8 +9495,8 @@ static void end_ref_mode(int result)
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -9509,8 +9509,8 @@ int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
 int fprintf_va_3(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -13061,12 +13061,12 @@ static void add_dispersion(double dispersion, void *anything)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param1);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param1);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13078,11 +13078,11 @@ static void add_dispersion(double dispersion, void *anything)
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13209,11 +13209,11 @@ void SRC_ReloadSources(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13224,11 +13224,11 @@ void SRC_ReloadSources(void)
 int snprintf_va_5(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -14130,9 +14130,9 @@ void SST_SaveToFile(SST_Stats inst, FILE *out)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -14143,28 +14143,28 @@ void SST_SaveToFile(SST_Stats inst, FILE *out)
 int sscanf_va_60(char const * restrict s, char const * restrict format,
                  int *param0);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param9);
-    requires \valid(param8);
-    requires \valid(param7);
-    requires \valid(param6);
-    requires \valid(param5);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param9);
-    ensures \initialized(param8);
-    ensures \initialized(param7);
-    ensures \initialized(param6);
-    ensures \initialized(param5);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires \valid(param5);
+    requires \valid(param6);
+    requires \valid(param7);
+    requires \valid(param8);
+    requires \valid(param9);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
+    ensures \initialized(param5);
+    ensures \initialized(param6);
+    ensures \initialized(param7);
+    ensures \initialized(param8);
+    ensures \initialized(param9);
     assigns \result, *param9, *param8, *param7, *param6, *param5, *param4,
             *param3, *param2, *param1, *param0;
     assigns \result
@@ -14196,9 +14196,9 @@ int sscanf_va_61(char const * restrict s, char const * restrict format,
                  double *param5, double *param6, double *param7,
                  double *param8, int *param9);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -14554,10 +14554,10 @@ void UTI_AddDiffToTimespec(struct timespec *a, struct timespec *b,
 
 static char buffer_pool[16][64];
 static int pool_ptr = 0;
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -14619,10 +14619,10 @@ char *UTI_RefidToString(uint32_t ref_id)
   return result;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -14630,10 +14630,10 @@ char *UTI_RefidToString(uint32_t ref_id)
  */
 int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -14647,10 +14647,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format,
                   unsigned long param0, unsigned long param1,
                   unsigned long param2, unsigned long param3);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -14660,10 +14660,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_10(char * restrict s, size_t n, char const * restrict format,
                    unsigned int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -14710,16 +14710,16 @@ char *UTI_IPToString(IPAddr *addr)
   return result;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -14938,11 +14938,11 @@ int UTI_IPAndPortToSockaddr(IPAddr *ip, unsigned short port,
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -14954,11 +14954,11 @@ int UTI_IPAndPortToSockaddr(IPAddr *ip, unsigned short port,
 int snprintf_va_12(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -14970,10 +14970,10 @@ int snprintf_va_12(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_13(char * restrict s, size_t n, char const * restrict format,
                    int param0, char *param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -15027,10 +15027,10 @@ char const *UTI_SockaddrFamilyToString(int family)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -15489,11 +15489,11 @@ void UTI_SetQuitSignalsHandler(void (*handler)(int ), int ignore_sigpipe)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
diff --git a/chrony/.frama-c/chrony-regress.parse/framac.ast b/chrony/.frama-c/chrony-regress.parse/framac.ast
index 7bd73249d3ed7070a05c570cd29743706d5d6947..1fe152bc985554c6ca44536508d7bfebc4e06467 100644
--- a/chrony/.frama-c/chrony-regress.parse/framac.ast
+++ b/chrony/.frama-c/chrony-regress.parse/framac.ast
@@ -805,8 +805,8 @@ void TST_Fail(int line)
  */
 int fprintf_va_1(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2460,12 +2460,12 @@ int DNS_IPAddress2Name(IPAddr *ip_addr, char *name, int len);
 
 void DNS_Reload(void);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2477,12 +2477,12 @@ void DNS_Reload(void);
 int sscanf_va_1(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2494,12 +2494,12 @@ int sscanf_va_1(char const * restrict s, char const * restrict format,
 int sscanf_va_2(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2511,12 +2511,12 @@ int sscanf_va_2(char const * restrict s, char const * restrict format,
 int sscanf_va_3(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2528,12 +2528,12 @@ int sscanf_va_3(char const * restrict s, char const * restrict format,
 int sscanf_va_4(char const * restrict s, char const * restrict format,
                 unsigned short *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2545,12 +2545,12 @@ int sscanf_va_4(char const * restrict s, char const * restrict format,
 int sscanf_va_5(char const * restrict s, char const * restrict format,
                 double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2562,12 +2562,12 @@ int sscanf_va_5(char const * restrict s, char const * restrict format,
 int sscanf_va_6(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2579,12 +2579,12 @@ int sscanf_va_6(char const * restrict s, char const * restrict format,
 int sscanf_va_7(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2596,12 +2596,12 @@ int sscanf_va_7(char const * restrict s, char const * restrict format,
 int sscanf_va_8(char const * restrict s, char const * restrict format,
                 int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2613,12 +2613,12 @@ int sscanf_va_8(char const * restrict s, char const * restrict format,
 int sscanf_va_9(char const * restrict s, char const * restrict format,
                 double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2630,12 +2630,12 @@ int sscanf_va_9(char const * restrict s, char const * restrict format,
 int sscanf_va_10(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2647,12 +2647,12 @@ int sscanf_va_10(char const * restrict s, char const * restrict format,
 int sscanf_va_11(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2664,12 +2664,12 @@ int sscanf_va_11(char const * restrict s, char const * restrict format,
 int sscanf_va_12(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2681,12 +2681,12 @@ int sscanf_va_12(char const * restrict s, char const * restrict format,
 int sscanf_va_13(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2698,12 +2698,12 @@ int sscanf_va_13(char const * restrict s, char const * restrict format,
 int sscanf_va_14(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2715,12 +2715,12 @@ int sscanf_va_14(char const * restrict s, char const * restrict format,
 int sscanf_va_15(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2732,12 +2732,12 @@ int sscanf_va_15(char const * restrict s, char const * restrict format,
 int sscanf_va_16(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -2749,12 +2749,12 @@ int sscanf_va_16(char const * restrict s, char const * restrict format,
 int sscanf_va_17(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3148,12 +3148,12 @@ int CPS_ParseNTPSourceAdd(char *line, CPS_NTP_Source *src)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3165,12 +3165,12 @@ int CPS_ParseNTPSourceAdd(char *line, CPS_NTP_Source *src)
 int sscanf_va_19(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -3326,9 +3326,9 @@ char *CPS_SplitWord(char *line)
   return q;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4335,9 +4335,9 @@ static int parse_string(char *line, char **result)
   return __retres;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4363,9 +4363,9 @@ static int parse_int(char *line, int *result)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -4415,12 +4415,12 @@ static void parse_source(char *line, NTP_Source_Type type, int pool)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4466,12 +4466,12 @@ static void parse_ratelimit(char *line, int *enabled_0, int *interval,
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4483,12 +4483,12 @@ static void parse_ratelimit(char *line, int *enabled_0, int *interval,
 int sscanf_va_25(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4500,12 +4500,12 @@ int sscanf_va_25(char const * restrict s, char const * restrict format,
 int sscanf_va_26(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4517,12 +4517,12 @@ int sscanf_va_26(char const * restrict s, char const * restrict format,
 int sscanf_va_27(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4534,12 +4534,12 @@ int sscanf_va_27(char const * restrict s, char const * restrict format,
 int sscanf_va_28(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4551,12 +4551,12 @@ int sscanf_va_28(char const * restrict s, char const * restrict format,
 int sscanf_va_29(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4568,12 +4568,12 @@ int sscanf_va_29(char const * restrict s, char const * restrict format,
 int sscanf_va_30(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4585,12 +4585,12 @@ int sscanf_va_30(char const * restrict s, char const * restrict format,
 int sscanf_va_31(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4602,12 +4602,12 @@ int sscanf_va_31(char const * restrict s, char const * restrict format,
 int sscanf_va_32(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4619,12 +4619,12 @@ int sscanf_va_32(char const * restrict s, char const * restrict format,
 int sscanf_va_33(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4636,12 +4636,12 @@ int sscanf_va_33(char const * restrict s, char const * restrict format,
 int sscanf_va_34(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4653,12 +4653,12 @@ int sscanf_va_34(char const * restrict s, char const * restrict format,
 int sscanf_va_35(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4670,12 +4670,12 @@ int sscanf_va_35(char const * restrict s, char const * restrict format,
 int sscanf_va_36(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -4687,9 +4687,9 @@ int sscanf_va_36(char const * restrict s, char const * restrict format,
 int sscanf_va_37(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -4702,9 +4702,9 @@ int sscanf_va_37(char const * restrict s, char const * restrict format,
 int sscanf_va_38(char const * restrict s, char const * restrict format,
                  char *param0, int *param1);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -5086,9 +5086,9 @@ static void parse_local(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5159,9 +5159,9 @@ static void parse_leapsecmode(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5181,12 +5181,12 @@ static void parse_clientloglimit(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5207,12 +5207,12 @@ static void parse_fallbackdrift(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5239,14 +5239,14 @@ static void parse_makestep(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
     assigns \result, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5273,9 +5273,9 @@ static void parse_maxchange(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5303,16 +5303,16 @@ static void parse_mailonchange(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5329,9 +5329,9 @@ int sscanf_va_46(char const * restrict s, char const * restrict format,
                  unsigned long *param0, unsigned long *param1,
                  unsigned long *param2, unsigned long *param3);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5503,9 +5503,9 @@ static void parse_bindcmdaddress(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5516,9 +5516,9 @@ static void parse_bindcmdaddress(char *line)
 int sscanf_va_48(char const * restrict s, char const * restrict format,
                  int *param0);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5574,12 +5574,12 @@ static void parse_broadcast(char *line)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5615,9 +5615,9 @@ static void parse_smoothtime(char *line)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -5628,18 +5628,18 @@ static void parse_smoothtime(char *line)
 int sscanf_va_51(char const * restrict s, char const * restrict format,
                  double *param0);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
     assigns \result, *param4, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5700,9 +5700,9 @@ static void parse_tempcomp(char *line)
   return_label: return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param1);
     requires valid_read_string(format);
-    requires \valid(param1);
+    requires valid_read_string(s);
     ensures \initialized(param1);
     assigns \result, *param1, *(param0 + (0 ..));
     assigns \result
@@ -5715,12 +5715,12 @@ static void parse_tempcomp(char *line)
 int sscanf_va_53(char const * restrict s, char const * restrict format,
                  char *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5732,12 +5732,12 @@ int sscanf_va_53(char const * restrict s, char const * restrict format,
 int sscanf_va_54(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5749,12 +5749,12 @@ int sscanf_va_54(char const * restrict s, char const * restrict format,
 int sscanf_va_55(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5766,12 +5766,12 @@ int sscanf_va_55(char const * restrict s, char const * restrict format,
 int sscanf_va_56(char const * restrict s, char const * restrict format,
                  double *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5783,12 +5783,12 @@ int sscanf_va_56(char const * restrict s, char const * restrict format,
 int sscanf_va_57(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -5800,12 +5800,12 @@ int sscanf_va_57(char const * restrict s, char const * restrict format,
 int sscanf_va_58(char const * restrict s, char const * restrict format,
                  int *param0, int *param1);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -8182,11 +8182,11 @@ DNS_Status DNS_Name2IPAddress(char const *name, IPAddr *ip_addrs,
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -8905,11 +8905,11 @@ static void handle_slew(struct timespec *raw, struct timespec *cooked,
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, stream->__fc_FILE_data, *param1, *param0;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -9294,11 +9294,11 @@ static void end_ref_mode(int result)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -9309,8 +9309,8 @@ static void end_ref_mode(int result)
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -9323,8 +9323,8 @@ int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
 int fprintf_va_3(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -12088,12 +12088,12 @@ static void add_dispersion(double dispersion, void *anything)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param1);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param1);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -12105,11 +12105,11 @@ static void add_dispersion(double dispersion, void *anything)
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -12236,11 +12236,11 @@ void SRC_ReloadSources(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -12251,11 +12251,11 @@ void SRC_ReloadSources(void)
 int snprintf_va_5(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13157,9 +13157,9 @@ void SST_SaveToFile(SST_Stats inst, FILE *out)
   return;
 }
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -13170,28 +13170,28 @@ void SST_SaveToFile(SST_Stats inst, FILE *out)
 int sscanf_va_60(char const * restrict s, char const * restrict format,
                  int *param0);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param9);
-    requires \valid(param8);
-    requires \valid(param7);
-    requires \valid(param6);
-    requires \valid(param5);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param9);
-    ensures \initialized(param8);
-    ensures \initialized(param7);
-    ensures \initialized(param6);
-    ensures \initialized(param5);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires \valid(param5);
+    requires \valid(param6);
+    requires \valid(param7);
+    requires \valid(param8);
+    requires \valid(param9);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
+    ensures \initialized(param5);
+    ensures \initialized(param6);
+    ensures \initialized(param7);
+    ensures \initialized(param8);
+    ensures \initialized(param9);
     assigns \result, *param9, *param8, *param7, *param6, *param5, *param4,
             *param3, *param2, *param1, *param0;
     assigns \result
@@ -13223,9 +13223,9 @@ int sscanf_va_61(char const * restrict s, char const * restrict format,
                  double *param5, double *param6, double *param7,
                  double *param8, int *param9);
 
-/*@ requires valid_read_string(s);
+/*@ requires \valid(param0);
     requires valid_read_string(format);
-    requires \valid(param0);
+    requires valid_read_string(s);
     ensures \initialized(param0);
     assigns \result, *param0;
     assigns \result
@@ -13581,10 +13581,10 @@ void UTI_AddDiffToTimespec(struct timespec *a, struct timespec *b,
 
 static char buffer_pool[16][64];
 static int pool_ptr = 0;
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13646,10 +13646,10 @@ char *UTI_RefidToString(uint32_t ref_id)
   return result;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -13657,10 +13657,10 @@ char *UTI_RefidToString(uint32_t ref_id)
  */
 int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13674,10 +13674,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format,
                   unsigned long param0, unsigned long param1,
                   unsigned long param2, unsigned long param3);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -13687,10 +13687,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_10(char * restrict s, size_t n, char const * restrict format,
                    unsigned int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -13737,16 +13737,16 @@ char *UTI_IPToString(IPAddr *addr)
   return result;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -13965,11 +13965,11 @@ int UTI_IPAndPortToSockaddr(IPAddr *ip, unsigned short port,
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13981,11 +13981,11 @@ int UTI_IPAndPortToSockaddr(IPAddr *ip, unsigned short port,
 int snprintf_va_12(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -13997,10 +13997,10 @@ int snprintf_va_12(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_13(char * restrict s, size_t n, char const * restrict format,
                    int param0, char *param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -14054,10 +14054,10 @@ char const *UTI_SockaddrFamilyToString(int family)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -14516,11 +14516,11 @@ void UTI_SetQuitSignalsHandler(void (*handler)(int ), int ignore_sigpipe)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
diff --git a/frama-c b/frama-c
index e9b106433ad0ae49c91648dfefbd051624525375..7562208af674d75b4cdd8db615ec3236f6405f2d 160000
--- a/frama-c
+++ b/frama-c
@@ -1 +1 @@
-Subproject commit e9b106433ad0ae49c91648dfefbd051624525375
+Subproject commit 7562208af674d75b4cdd8db615ec3236f6405f2d
diff --git a/genann/.frama-c/genann.eva/alarms.csv b/genann/.frama-c/genann.eva/alarms.csv
index d353cf06ad00ff0e9a4f7bbe8c2db2a8e1960492..d6baa338e8e8366f2e5b467f21cdabea59bf26e1 100644
--- a/genann/.frama-c/genann.eva/alarms.csv
+++ b/genann/.frama-c/genann.eva/alarms.csv
@@ -29,7 +29,6 @@ directory	file	line	function	property kind	status	property
 .	genann.c	141	genann_init	mem_access	Unknown	\valid(&ret->activation_hidden)
 .	genann.c	142	genann_init	mem_access	Unknown	\valid(&ret->activation_output)
 .	genann.c	164	genann_read	mem_access	Unknown	\valid_read(&ann->total_weights)
-.	genann.c	166	fscanf_va_2	precondition	Unknown	\valid(param0)
 .	genann.c	166	genann_read	mem_access	Unknown	\valid_read(&ann->weight)
 .	genann.c	166	genann_read	precondition of fscanf_va_2	Unknown	\valid(param0)
 .	genann.c	180	genann_copy	mem_access	Unknown	\valid_read(&ann->inputs)
@@ -74,3 +73,4 @@ directory	file	line	function	property kind	status	property
 .	test.c	271	main	signed_overflow	Unknown	(int)(ltests - ts_7) - (int)(lfails - fs_7) ≤ 2147483647
 .	test.c	271	main	signed_overflow	Unknown	-2147483648 ≤ (int)(ltests - ts_7) - (int)(lfails - fs_7)
 FRAMAC_SHARE/libc	stdio.h	120	fclose	precondition	Unknown	valid_stream: \valid(stream)
+FRAMAC_SHARE/libc	stdio.h	209	fscanf_va_2	precondition	Unknown	\valid(param0)
diff --git a/genann/.frama-c/genann.parse/framac.ast b/genann/.frama-c/genann.parse/framac.ast
index 9e94c81d2ac6b27a524366283f621d08d9a309f6..25b0553d6c4920d8cd9529a37db146897c2767ac 100644
--- a/genann/.frama-c/genann.parse/framac.ast
+++ b/genann/.frama-c/genann.parse/framac.ast
@@ -209,15 +209,15 @@ genann *genann_init(int inputs, int hidden_layers, int hidden, int outputs)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, stream->__fc_FILE_data, *param3, *param2, *param1,
             *param0;
     assigns \result
@@ -243,8 +243,8 @@ genann *genann_init(int inputs, int hidden_layers, int hidden, int outputs)
 int fscanf_va_1(FILE * restrict stream, char const * restrict format,
                 int *param0, int *param1, int *param2, int *param3);
 
-/*@ requires valid_read_string(format);
-    requires \valid(param0);
+/*@ requires \valid(param0);
+    requires valid_read_string(format);
     ensures \initialized(param0);
     assigns \result, stream->__fc_FILE_data, *param0;
     assigns \result
@@ -687,8 +687,8 @@ void genann_write(genann const *ann, FILE *out)
 
 static int ltests = 0;
 static int lfails = 0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -704,8 +704,8 @@ static int lfails = 0;
 int printf_va_1(char const * restrict format, char *param0, int param1,
                 int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -721,8 +721,8 @@ int printf_va_1(char const * restrict format, char *param0, int param1,
 int printf_va_2(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -738,8 +738,8 @@ int printf_va_2(char const * restrict format, char *param0, int param1,
 int printf_va_3(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -755,8 +755,8 @@ int printf_va_3(char const * restrict format, char *param0, int param1,
 int printf_va_4(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -772,8 +772,8 @@ int printf_va_4(char const * restrict format, char *param0, int param1,
 int printf_va_5(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -789,8 +789,8 @@ int printf_va_5(char const * restrict format, char *param0, int param1,
 int printf_va_6(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -915,8 +915,8 @@ void basic(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -932,8 +932,8 @@ void basic(void)
 int printf_va_8(char const * restrict format, char *param0, int param1,
                 int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -949,8 +949,8 @@ int printf_va_8(char const * restrict format, char *param0, int param1,
 int printf_va_9(char const * restrict format, char *param0, int param1,
                 double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -966,8 +966,8 @@ int printf_va_9(char const * restrict format, char *param0, int param1,
 int printf_va_10(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -983,8 +983,8 @@ int printf_va_10(char const * restrict format, char *param0, int param1,
 int printf_va_11(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1089,8 +1089,8 @@ void xor(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1134,8 +1134,8 @@ void backprop(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1151,8 +1151,8 @@ void backprop(void)
 int printf_va_14(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1168,8 +1168,8 @@ int printf_va_14(char const * restrict format, char *param0, int param1,
 int printf_va_15(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1185,8 +1185,8 @@ int printf_va_15(char const * restrict format, char *param0, int param1,
 int printf_va_16(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1288,8 +1288,8 @@ void train_and(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1305,8 +1305,8 @@ void train_and(void)
 int printf_va_18(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1322,8 +1322,8 @@ int printf_va_18(char const * restrict format, char *param0, int param1,
 int printf_va_19(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1339,8 +1339,8 @@ int printf_va_19(char const * restrict format, char *param0, int param1,
 int printf_va_20(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1443,8 +1443,8 @@ void train_or(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1460,8 +1460,8 @@ void train_or(void)
 int printf_va_22(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1477,8 +1477,8 @@ int printf_va_22(char const * restrict format, char *param0, int param1,
 int printf_va_23(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1494,8 +1494,8 @@ int printf_va_23(char const * restrict format, char *param0, int param1,
 int printf_va_24(char const * restrict format, char *param0, int param1,
                  double param2, double param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1597,8 +1597,8 @@ void train_xor(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1614,8 +1614,8 @@ void train_xor(void)
 int printf_va_26(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1631,8 +1631,8 @@ int printf_va_26(char const * restrict format, char *param0, int param1,
 int printf_va_27(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1648,8 +1648,8 @@ int printf_va_27(char const * restrict format, char *param0, int param1,
 int printf_va_28(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1665,8 +1665,8 @@ int printf_va_28(char const * restrict format, char *param0, int param1,
 int printf_va_29(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1682,8 +1682,8 @@ int printf_va_29(char const * restrict format, char *param0, int param1,
 int printf_va_30(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1751,8 +1751,8 @@ void persist(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1768,8 +1768,8 @@ void persist(void)
 int printf_va_32(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1785,8 +1785,8 @@ int printf_va_32(char const * restrict format, char *param0, int param1,
 int printf_va_33(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1802,8 +1802,8 @@ int printf_va_33(char const * restrict format, char *param0, int param1,
 int printf_va_34(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1819,8 +1819,8 @@ int printf_va_34(char const * restrict format, char *param0, int param1,
 int printf_va_35(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1836,8 +1836,8 @@ int printf_va_35(char const * restrict format, char *param0, int param1,
 int printf_va_36(char const * restrict format, char *param0, int param1,
                  int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1907,8 +1907,8 @@ void copy(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1964,8 +1964,8 @@ void sigmoid(void)
  */
 int printf_va_39(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1993,8 +1993,8 @@ int printf_va_40(char const * restrict format, char *param0);
 int printf_va_41(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2022,8 +2022,8 @@ int printf_va_42(char const * restrict format, char *param0);
 int printf_va_43(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2051,8 +2051,8 @@ int printf_va_44(char const * restrict format, char *param0);
 int printf_va_45(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2080,8 +2080,8 @@ int printf_va_46(char const * restrict format, char *param0);
 int printf_va_47(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2109,8 +2109,8 @@ int printf_va_48(char const * restrict format, char *param0);
 int printf_va_49(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2138,8 +2138,8 @@ int printf_va_50(char const * restrict format, char *param0);
 int printf_va_51(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2167,8 +2167,8 @@ int printf_va_52(char const * restrict format, char *param0);
 int printf_va_53(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2196,8 +2196,8 @@ int printf_va_54(char const * restrict format, char *param0);
 int printf_va_55(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/gzip124/.frama-c/gzip124.eva/alarms.csv b/gzip124/.frama-c/gzip124.eva/alarms.csv
index 3b90fec16ea7fcb8e16e775a986e78d09e7da59f..b34b7cf64ef814060a7edd2ae38ea4a80c055b26 100644
--- a/gzip124/.frama-c/gzip124.eva/alarms.csv
+++ b/gzip124/.frama-c/gzip124.eva/alarms.csv
@@ -78,40 +78,24 @@ directory	file	line	function	property kind	status	property
 .	getopt.c	468	_getopt_internal	differing_blocks	Unknown	\base_addr(s) ≡ \base_addr(nextchar)
 .	getopt.c	492	_getopt_internal	precondition of fprintf_va_66	Unknown	valid_read_string(param0)
 .	getopt.c	492	_getopt_internal	precondition of fprintf_va_66	Unknown	valid_read_string(param1)
-.	getopt.c	492	fprintf_va_66	precondition	Unknown	valid_read_string(param0)
-.	getopt.c	492	fprintf_va_66	precondition	Unknown	valid_read_string(param1)
 .	getopt.c	513	_getopt_internal	mem_access	Unknown	\valid_read(*(argv + (int)(optind - 1)) + 1)
 .	getopt.c	515	_getopt_internal	precondition of fprintf_va_67	Unknown	valid_read_string(param0)
-.	getopt.c	515	fprintf_va_67	precondition	Unknown	valid_read_string(param0)
 .	getopt.c	520	_getopt_internal	mem_access	Unknown	\valid_read(*(argv + (int)(optind - 1)) + 0)
 .	getopt.c	520	_getopt_internal	precondition of fprintf_va_68	Unknown	valid_read_string(param0)
-.	getopt.c	520	fprintf_va_68	precondition	Unknown	valid_read_string(param0)
 .	getopt.c	535	_getopt_internal	precondition of fprintf_va_69	Unknown	valid_read_string(param0)
 .	getopt.c	535	_getopt_internal	precondition of fprintf_va_69	Unknown	valid_read_string(param1)
-.	getopt.c	535	fprintf_va_69	precondition	Unknown	valid_read_string(param0)
-.	getopt.c	535	fprintf_va_69	precondition	Unknown	valid_read_string(param1)
 .	getopt.c	565	_getopt_internal	precondition of fprintf_va_70	Unknown	valid_read_string(param0)
 .	getopt.c	565	_getopt_internal	precondition of fprintf_va_70	Unknown	valid_read_string(param1)
-.	getopt.c	565	fprintf_va_70	precondition	Unknown	valid_read_string(param0)
-.	getopt.c	565	fprintf_va_70	precondition	Unknown	valid_read_string(param1)
 .	getopt.c	569	_getopt_internal	precondition of fprintf_va_71	Unknown	valid_read_string(param0)
 .	getopt.c	569	_getopt_internal	precondition of fprintf_va_71	Unknown	valid_read_string(param2)
-.	getopt.c	569	fprintf_va_71	precondition	Unknown	valid_read_string(param0)
-.	getopt.c	569	fprintf_va_71	precondition	Unknown	valid_read_string(param2)
 .	getopt.c	581	_getopt_internal	mem_access	Unknown	\valid_read(tmp_12)
 .	getopt.c	585	_getopt_internal	mem_access	Unknown	\valid_read(nextchar)
 .	getopt.c	600	_getopt_internal	precondition of fprintf_va_72	Unknown	valid_read_string(param0)
-.	getopt.c	600	fprintf_va_72	precondition	Unknown	valid_read_string(param0)
 .	getopt.c	639	_getopt_internal	precondition of fprintf_va_73	Unknown	valid_read_string(param0)
-.	getopt.c	639	fprintf_va_73	precondition	Unknown	valid_read_string(param0)
 .	getopt.c	652	_getopt_internal	mem_access	Unknown	\valid_read(argv + tmp_14)
-.	gzip.c	310	fprintf_va_1	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	310	usage	precondition of fprintf_va_1	Unknown	valid_read_string(param0)
-.	gzip.c	364	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	364	help	precondition of fprintf_va_2	Unknown	valid_read_string(param0)
-.	gzip.c	374	fprintf_va_4	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	374	license	precondition of fprintf_va_4	Unknown	valid_read_string(param0)
-.	gzip.c	381	fprintf_va_6	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	381	version	precondition of fprintf_va_6	Unknown	valid_read_string(param0)
 .	gzip.c	435	main	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	438	main	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
@@ -125,20 +109,14 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	524	main	precondition of strcpy	Unknown	room_string: \valid(dest + (0 .. strlen(src)))
 .	gzip.c	524	main	precondition of strcpy	Unknown	valid_string_src: valid_read_string(src)
 .	gzip.c	530	main	signed_overflow	Unknown	verbose + 1 ≤ 2147483647
-.	gzip.c	537	fprintf_va_11	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	537	main	precondition of fprintf_va_11	Unknown	valid_read_string(param0)
 .	gzip.c	559	main	signed_overflow	Unknown	argc - optind ≤ 2147483647
-.	gzip.c	564	fprintf_va_12	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	564	main	precondition of fprintf_va_12	Unknown	valid_read_string(param0)
-.	gzip.c	569	fprintf_va_13	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	569	fprintf_va_13	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	569	main	precondition of fprintf_va_13	Unknown	valid_read_string(param0)
 .	gzip.c	569	main	precondition of fprintf_va_13	Unknown	valid_read_string(param1)
 .	gzip.c	593	main	mem_access	Unknown	\valid_read(argv + tmp_10)
 .	gzip.c	611	treat_stdin	precondition of fileno	Unknown	valid_stream: \valid(stream)
-.	gzip.c	624	fprintf_va_14	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	624	treat_stdin	precondition of fprintf_va_14	Unknown	valid_read_string(param0)
-.	gzip.c	628	fprintf_va_15	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	628	treat_stdin	precondition of fprintf_va_15	Unknown	valid_read_string(param0)
 .	gzip.c	646	treat_stdin	precondition of fileno	Unknown	valid_stream: \valid(stream)
 .	gzip.c	675	treat_stdin	precondition of fileno	Unknown	valid_stream: \valid(stream)
@@ -148,37 +126,23 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	690	treat_stdin	signed_overflow	Unknown	-2147483648 ≤ bytes_out - header_bytes
 .	gzip.c	690	treat_stdin	signed_overflow	Unknown	bytes_out - header_bytes ≤ 2147483647
 .	gzip.c	708	treat_file	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-.	gzip.c	734	fprintf_va_18	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	734	fprintf_va_18	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	734	treat_file	precondition of fprintf_va_18	Unknown	valid_read_string(param0)
 .	gzip.c	734	treat_file	precondition of fprintf_va_18	Unknown	valid_read_string(param1)
-.	gzip.c	738	fprintf_va_19	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	738	fprintf_va_19	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	738	treat_file	precondition of fprintf_va_19	Unknown	valid_read_string(param0)
 .	gzip.c	738	treat_file	precondition of fprintf_va_19	Unknown	valid_read_string(param1)
-.	gzip.c	744	fprintf_va_20	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	744	fprintf_va_20	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	744	treat_file	precondition of fprintf_va_20	Unknown	valid_read_string(param0)
 .	gzip.c	744	treat_file	precondition of fprintf_va_20	Unknown	valid_read_string(param1)
 .	gzip.c	744	treat_file	signed_overflow	Unknown	-2147483648 ≤ (int)istat.st_nlink - 1
 .	gzip.c	767	treat_file	precondition of __va_open_mode_t	Unknown	valid_filename: valid_read_string(filename)
-.	gzip.c	770	fprintf_va_21	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	770	treat_file	precondition of fprintf_va_21	Unknown	valid_read_string(param0)
 .	gzip.c	771	treat_file	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
-.	gzip.c	781	treat_file	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
-.	gzip.c	787	treat_file	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	796	treat_file	precondition of fileno	Unknown	valid_stream: \valid(stream)
-.	gzip.c	802	fprintf_va_22	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	802	fprintf_va_22	precondition	Unknown	valid_read_string(param1)
-.	gzip.c	802	fprintf_va_22	precondition	Unknown	valid_read_string(param2)
 .	gzip.c	802	treat_file	precondition of fprintf_va_22	Unknown	valid_read_string(param0)
 .	gzip.c	802	treat_file	precondition of fprintf_va_22	Unknown	valid_read_string(param1)
 .	gzip.c	802	treat_file	precondition of fprintf_va_22	Unknown	valid_read_string(param2)
-.	gzip.c	810	fprintf_va_23	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	810	treat_file	precondition of fprintf_va_23	Unknown	valid_read_string(param0)
 .	gzip.c	810	treat_file	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	811	treat_file	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-.	gzip.c	829	treat_file	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	830	treat_file	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	834	treat_file	precondition of unlink	Unknown	valid_string_path: valid_read_string(path)
 .	gzip.c	842	treat_file	signed_overflow	Unknown	-2147483648 ≤ bytes_out - (long)(bytes_in - header_bytes)
@@ -189,17 +153,11 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	844	treat_file	signed_overflow	Unknown	bytes_in - (long)(bytes_out - header_bytes) ≤ 2147483647
 .	gzip.c	844	treat_file	signed_overflow	Unknown	-2147483648 ≤ bytes_out - header_bytes
 .	gzip.c	844	treat_file	signed_overflow	Unknown	bytes_out - header_bytes ≤ 2147483647
-.	gzip.c	847	fprintf_va_25	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	847	treat_file	precondition of fprintf_va_25	Unknown	valid_read_string(param0)
-.	gzip.c	877	create_outfile	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	882	create_outfile	precondition of __va_open_mode_t	Unknown	valid_filename: valid_read_string(filename)
 .	gzip.c	884	create_outfile	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
-.	gzip.c	885	create_outfile	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	896	create_outfile	precondition of fprintf_va_27	Unknown	valid_read_string(param0)
-.	gzip.c	896	fprintf_va_27	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	897	create_outfile	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
-.	gzip.c	898	create_outfile	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
-.	gzip.c	898	create_outfile	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	899	create_outfile	precondition of unlink	Unknown	valid_string_path: valid_read_string(path)
 .	gzip.c	933	do_stat	precondition of lstat	Unknown	valid_path: valid_read_string(path)
 .	gzip.c	936	do_stat	precondition of stat	Unknown	valid_pathname: valid_read_string(pathname)
@@ -226,8 +184,6 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1079	make_ofname	precondition of strcpy	Unknown	room_string: \valid(dest + (0 .. strlen(src)))
 .	gzip.c	1079	make_ofname	precondition of strcpy	Unknown	valid_string_src: valid_read_string(src)
 .	gzip.c	1084	make_ofname	ptr_comparison	Unknown	\pointer_comparable((void *)suff, (void *)0)
-.	gzip.c	1092	fprintf_va_29	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1092	fprintf_va_29	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1092	make_ofname	precondition of fprintf_va_29	Unknown	valid_read_string(param0)
 .	gzip.c	1092	make_ofname	precondition of fprintf_va_29	Unknown	valid_read_string(param1)
 .	gzip.c	1099	make_ofname	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
@@ -235,9 +191,6 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1100	make_ofname	precondition of strcpy	Unknown	room_string: \valid(dest + (0 .. strlen(src)))
 .	gzip.c	1102	make_ofname	mem_access	Unknown	\valid(suff)
 .	gzip.c	1106	make_ofname	ptr_comparison	Unknown	\pointer_comparable((void *)suff, (void *)0)
-.	gzip.c	1109	fprintf_va_30	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1109	fprintf_va_30	precondition	Unknown	valid_read_string(param1)
-.	gzip.c	1109	fprintf_va_30	precondition	Unknown	valid_read_string(param2)
 .	gzip.c	1109	make_ofname	precondition of fprintf_va_30	Unknown	valid_read_string(param0)
 .	gzip.c	1109	make_ofname	precondition of fprintf_va_30	Unknown	valid_read_string(param1)
 .	gzip.c	1109	make_ofname	precondition of fprintf_va_30	Unknown	valid_read_string(param2)
@@ -250,21 +203,13 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1170	get_method	index_bound	Unknown	tmp_8 < (int)(0x8000 + 64)
 .	gzip.c	1173	get_method	signed_overflow	Unknown	part_nb + 1 ≤ 2147483647
 .	gzip.c	1181	get_method	index_bound	Unknown	tmp_11 < (int)(0x8000 + 64)
-.	gzip.c	1183	fprintf_va_31	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1183	fprintf_va_31	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1183	get_method	precondition of fprintf_va_31	Unknown	valid_read_string(param0)
 .	gzip.c	1183	get_method	precondition of fprintf_va_31	Unknown	valid_read_string(param1)
 .	gzip.c	1190	get_method	index_bound	Unknown	tmp_14 < (int)(0x8000 + 64)
-.	gzip.c	1193	fprintf_va_32	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1193	fprintf_va_32	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1193	get_method	precondition of fprintf_va_32	Unknown	valid_read_string(param0)
 .	gzip.c	1193	get_method	precondition of fprintf_va_32	Unknown	valid_read_string(param1)
-.	gzip.c	1200	fprintf_va_33	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1200	fprintf_va_33	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1200	get_method	precondition of fprintf_va_33	Unknown	valid_read_string(param0)
 .	gzip.c	1200	get_method	precondition of fprintf_va_33	Unknown	valid_read_string(param1)
-.	gzip.c	1207	fprintf_va_34	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1207	fprintf_va_34	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1207	get_method	precondition of fprintf_va_34	Unknown	valid_read_string(param0)
 .	gzip.c	1207	get_method	precondition of fprintf_va_34	Unknown	valid_read_string(param1)
 .	gzip.c	1213	get_method	index_bound	Unknown	tmp_17 < (int)(0x8000 + 64)
@@ -275,14 +220,10 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1220	get_method	index_bound	Unknown	tmp_30_0 < (int)(0x8000 + 64)
 .	gzip.c	1223	get_method	index_bound	Unknown	tmp_31 < (int)(0x8000 + 64)
 .	gzip.c	1224	get_method	index_bound	Unknown	tmp_34 < (int)(0x8000 + 64)
-.	gzip.c	1226	fprintf_va_35	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1226	fprintf_va_35	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1226	get_method	precondition of fprintf_va_35	Unknown	valid_read_string(param0)
 .	gzip.c	1226	get_method	precondition of fprintf_va_35	Unknown	valid_read_string(param1)
 .	gzip.c	1231	get_method	index_bound	Unknown	tmp_37 < (int)(0x8000 + 64)
 .	gzip.c	1232	get_method	index_bound	Unknown	tmp_40 < (int)(0x8000 + 64)
-.	gzip.c	1234	fprintf_va_36	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1234	fprintf_va_36	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1234	get_method	precondition of fprintf_va_36	Unknown	valid_read_string(param0)
 .	gzip.c	1234	get_method	precondition of fprintf_va_36	Unknown	valid_read_string(param1)
 .	gzip.c	1237	get_method	index_bound	Unknown	tmp_43 < (int)(0x8000 + 64)
@@ -291,12 +232,8 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1251	get_method	index_bound	Unknown	tmp_48 < (int)(0x8000 + 64)
 .	gzip.c	1260	get_method	ptr_comparison	Unknown	\pointer_comparable((void *)0, (void *)base)
 .	gzip.c	1267	get_method	index_bound	Unknown	tmp_52 < (int)(0x8000 + 64)
-.	gzip.c	1307	fprintf_va_37	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1307	fprintf_va_37	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1307	get_method	precondition of fprintf_va_37	Unknown	valid_read_string(param0)
 .	gzip.c	1307	get_method	precondition of fprintf_va_37	Unknown	valid_read_string(param1)
-.	gzip.c	1311	fprintf_va_38	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1311	fprintf_va_38	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1311	get_method	precondition of fprintf_va_38	Unknown	valid_read_string(param0)
 .	gzip.c	1311	get_method	precondition of fprintf_va_38	Unknown	valid_read_string(param1)
 .	gzip.c	1353	do_list	signed_overflow	Unknown	total_out - (long)(total_in - header_bytes) ≤ 2147483647
@@ -319,7 +256,6 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1402	do_list	signed_overflow	Unknown	-2147483648 ≤ bytes_in - header_bytes
 .	gzip.c	1402	do_list	signed_overflow	Unknown	bytes_in - header_bytes ≤ 2147483647
 .	gzip.c	1403	do_list	precondition of printf_va_8	Unknown	valid_read_string(param0)
-.	gzip.c	1403	printf_va_8	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	1413	same_file	initialization	Unknown	\initialized(&stat1->st_ino)
 .	gzip.c	1436	name_too_long	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	1437	name_too_long	mem_access	Unknown	\valid_read(name + (int)(s - 1))
@@ -349,33 +285,23 @@ directory	file	line	function	property kind	status	property
 .	gzip.c	1553	check_ofname	precondition of strcmp	Unknown	valid_string_s2: valid_read_string(s2)
 .	gzip.c	1554	check_ofname	precondition of fprintf_va_39	Unknown	valid_read_string(param0)
 .	gzip.c	1554	check_ofname	precondition of fprintf_va_39	Unknown	valid_read_string(param1)
-.	gzip.c	1554	fprintf_va_39	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1554	fprintf_va_39	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1557	check_ofname	precondition of fprintf_va_40	Unknown	valid_read_string(param0)
 .	gzip.c	1557	check_ofname	precondition of fprintf_va_40	Unknown	valid_read_string(param1)
 .	gzip.c	1557	check_ofname	precondition of fprintf_va_40	Unknown	valid_read_string(param2)
-.	gzip.c	1557	fprintf_va_40	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1557	fprintf_va_40	precondition	Unknown	valid_read_string(param1)
-.	gzip.c	1557	fprintf_va_40	precondition	Unknown	valid_read_string(param2)
 .	gzip.c	1567	check_ofname	precondition of fprintf_va_41	Unknown	valid_read_string(param0)
 .	gzip.c	1567	check_ofname	precondition of fprintf_va_41	Unknown	valid_read_string(param1)
-.	gzip.c	1567	fprintf_va_41	precondition	Unknown	valid_read_string(param0)
-.	gzip.c	1567	fprintf_va_41	precondition	Unknown	valid_read_string(param1)
 .	gzip.c	1568	check_ofname	precondition of fileno	Unknown	valid_stream: \valid(stream)
 .	gzip.c	1571	check_ofname	precondition of fgets	Unknown	valid_stream: \valid(stream)
 .	gzip.c	1573	check_ofname	initialization	Unknown	\initialized((char *)response)
 .	gzip.c	1573	check_ofname	precondition of isupper	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
 .	gzip.c	1580	check_ofname	precondition of unlink	Unknown	valid_string_path: valid_read_string(path)
 .	gzip.c	1581	check_ofname	precondition of fprintf_va_44	Unknown	valid_read_string(param0)
-.	gzip.c	1581	fprintf_va_44	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	1582	check_ofname	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	1631	copy_stat	precondition of fprintf_va_45	Unknown	valid_read_string(param0)
-.	gzip.c	1631	fprintf_va_45	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	1632	copy_stat	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	1635	copy_stat	precondition of chown	Unknown	valid_string_path: valid_read_string(path)
 .	gzip.c	1640	copy_stat	precondition of unlink	Unknown	valid_string_path: valid_read_string(path)
 .	gzip.c	1641	copy_stat	precondition of fprintf_va_46	Unknown	valid_read_string(param0)
-.	gzip.c	1641	fprintf_va_46	precondition	Unknown	valid_read_string(param0)
 .	gzip.c	1642	copy_stat	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
 .	gzip.c	1743	abort_gzip	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	gzip.c	1744	abort_gzip	precondition of unlink	Unknown	valid_string_path: valid_read_string(path)
@@ -506,13 +432,9 @@ directory	file	line	function	property kind	status	property
 .	unlzh.c	367	decode	mem_access	Unknown	\valid(buffer + r)
 .	unlzh.c	373	decode	mem_access	Unknown	\valid(buffer + r)
 .	unlzw.c	215	unlzw	index_bound	Unknown	tmp < (int)(0x8000 + 64)
-.	unlzw.c	218	fprintf_va_64	precondition	Unknown	valid_read_string(param0)
-.	unlzw.c	218	fprintf_va_64	precondition	Unknown	valid_read_string(param1)
 .	unlzw.c	218	unlzw	precondition of fprintf_va_64	Unknown	valid_read_string(param0)
 .	unlzw.c	218	unlzw	precondition of fprintf_va_64	Unknown	valid_read_string(param1)
 .	unlzw.c	222	unlzw	signed_overflow	Unknown	1L << maxbits ≤ 2147483647
-.	unlzw.c	225	fprintf_va_65	precondition	Unknown	valid_read_string(param0)
-.	unlzw.c	225	fprintf_va_65	precondition	Unknown	valid_read_string(param1)
 .	unlzw.c	225	unlzw	precondition of fprintf_va_65	Unknown	valid_read_string(param0)
 .	unlzw.c	225	unlzw	precondition of fprintf_va_65	Unknown	valid_read_string(param1)
 .	unlzw.c	255	unlzw	index_bound	Unknown	i < (int)(0x8000 + 64)
@@ -573,16 +495,10 @@ directory	file	line	function	property kind	status	property
 .	unpack.c	227	unpack	index_bound	Unknown	(unsigned int)(peek + (unsigned int)lit_base[len]) < 256
 .	unzip.c	62	check_zipfile	precondition of fprintf_va_49	Unknown	valid_read_string(param0)
 .	unzip.c	62	check_zipfile	precondition of fprintf_va_49	Unknown	valid_read_string(param1)
-.	unzip.c	62	fprintf_va_49	precondition	Unknown	valid_read_string(param0)
-.	unzip.c	62	fprintf_va_49	precondition	Unknown	valid_read_string(param1)
 .	unzip.c	69	check_zipfile	precondition of fprintf_va_50	Unknown	valid_read_string(param0)
 .	unzip.c	69	check_zipfile	precondition of fprintf_va_50	Unknown	valid_read_string(param1)
-.	unzip.c	69	fprintf_va_50	precondition	Unknown	valid_read_string(param0)
-.	unzip.c	69	fprintf_va_50	precondition	Unknown	valid_read_string(param1)
 .	unzip.c	78	check_zipfile	precondition of fprintf_va_51	Unknown	valid_read_string(param0)
 .	unzip.c	78	check_zipfile	precondition of fprintf_va_51	Unknown	valid_read_string(param1)
-.	unzip.c	78	fprintf_va_51	precondition	Unknown	valid_read_string(param0)
-.	unzip.c	78	fprintf_va_51	precondition	Unknown	valid_read_string(param1)
 .	unzip.c	138	unzip	index_bound	Unknown	tmp_1 < (int)(0x8000 + 64)
 .	unzip.c	155	unzip	index_bound	Unknown	tmp_6 < (int)(0x8000 + 64)
 .	unzip.c	157	unzip	initialization	Unknown	\initialized(&buf[1])
@@ -605,12 +521,8 @@ directory	file	line	function	property kind	status	property
 .	unzip.c	182	unzip	mem_access	Unknown	\valid_read(&inbuf[inptr] + 1)
 .	unzip.c	182	unzip	mem_access	Unknown	\valid_read((&inbuf[inptr] + 2) + 0)
 .	unzip.c	182	unzip	mem_access	Unknown	\valid_read((&inbuf[inptr] + 2) + 1)
-.	unzip.c	184	fprintf_va_53	precondition	Unknown	valid_read_string(param0)
-.	unzip.c	184	fprintf_va_53	precondition	Unknown	valid_read_string(param1)
 .	unzip.c	184	unzip	precondition of fprintf_va_53	Unknown	valid_read_string(param0)
 .	unzip.c	184	unzip	precondition of fprintf_va_53	Unknown	valid_read_string(param1)
-.	unzip.c	189	fprintf_va_54	precondition	Unknown	valid_read_string(param0)
-.	unzip.c	189	fprintf_va_54	precondition	Unknown	valid_read_string(param1)
 .	unzip.c	189	unzip	precondition of fprintf_va_54	Unknown	valid_read_string(param0)
 .	unzip.c	189	unzip	precondition of fprintf_va_54	Unknown	valid_read_string(param1)
 .	util.c	46	copy	precondition of read	Unknown	valid_fd: 0 ≤ fd < 1024
@@ -628,14 +540,9 @@ directory	file	line	function	property kind	status	property
 .	util.c	294	add_envopt	precondition of strcpy	Invalid or unreachable	room_string: \valid(dest + (0 .. strlen(src)))
 .	util.c	339	error	precondition of fprintf_va_57	Unknown	valid_read_string(param0)
 .	util.c	339	error	precondition of fprintf_va_57	Unknown	valid_read_string(param1)
-.	util.c	339	fprintf_va_57	precondition	Unknown	valid_read_string(param0)
-.	util.c	339	fprintf_va_57	precondition	Unknown	valid_read_string(param1)
-.	util.c	351	fprintf_va_59	precondition	Unknown	valid_read_string(param0)
 .	util.c	351	read_error	precondition of fprintf_va_59	Unknown	valid_read_string(param0)
 .	util.c	353	read_error	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
-.	util.c	355	fprintf_va_60	precondition	Unknown	valid_read_string(param0)
 .	util.c	355	read_error	precondition of fprintf_va_60	Unknown	valid_read_string(param0)
-.	util.c	362	fprintf_va_61	precondition	Unknown	valid_read_string(param0)
 .	util.c	362	write_error	precondition of fprintf_va_61	Unknown	valid_read_string(param0)
 .	util.c	363	write_error	precondition of perror	Unknown	valid_string_s: valid_read_string(s)
 .	util.c	380	display_ratio	signed_overflow	Unknown	-2147483648 ≤ 1000L * num
@@ -647,7 +554,93 @@ directory	file	line	function	property kind	status	property
 .	zip.c	111	file_read	precondition of read	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
 .	zip.c	111	file_read	precondition of read	Unknown	valid_fd: 0 ≤ fd < 1024
 FRAMAC_SHARE/libc	ctype.h	174	isupper	precondition	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
-FRAMAC_SHARE/libc	fcntl.h	161	__va_open_mode_t	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	fcntl.h	165	__va_open_mode_t	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_1	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_11	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_12	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_13	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_13	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_14	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_15	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_18	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_18	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_19	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_19	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_20	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_20	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_21	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_22	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_22	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_22	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_23	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_25	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_27	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_29	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_29	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_30	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_30	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_30	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_31	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_31	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_32	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_32	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_33	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_33	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_34	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_34	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_35	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_35	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_36	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_36	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_37	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_37	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_38	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_38	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_39	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_39	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_40	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_40	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_40	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_41	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_41	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_44	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_45	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_46	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_49	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_49	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_50	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_50	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_51	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_51	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_53	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_53	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_54	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_54	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_57	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_57	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_59	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_6	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_60	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_61	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_64	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_64	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_65	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_65	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_66	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_66	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_67	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_68	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_69	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_69	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_70	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_70	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_71	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_71	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_72	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_73	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_8	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdio.h	266	fgets	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	323	putc	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	447	fileno	precondition	Unknown	valid_stream: \valid(stream)
@@ -675,14 +668,14 @@ FRAMAC_SHARE/libc	string.h	355	strcpy	precondition	Invalid or unreachable	room_s
 FRAMAC_SHARE/libc	string.h	411	strcat	precondition	Unknown	valid_string_src: valid_read_string(src)
 FRAMAC_SHARE/libc	string.h	412	strcat	precondition	Unknown	valid_string_dest: valid_string(dest)
 FRAMAC_SHARE/libc	string.h	413	strcat	precondition	Unknown	room_string: \valid(dest + (0 .. strlen(dest) + strlen(src)))
-FRAMAC_SHARE/libc	unistd.h	774	chown	precondition	Unknown	valid_string_path: valid_read_string(path)
-FRAMAC_SHARE/libc	unistd.h	782	close	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	967	lseek	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1006	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
-FRAMAC_SHARE/libc	unistd.h	1123	unlink	precondition	Unknown	valid_string_path: valid_read_string(path)
-FRAMAC_SHARE/libc	unistd.h	1139	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	775	chown	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	783	close	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	968	lseek	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1008	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1124	unlink	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1141	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
 FRAMAC_SHARE/libc/sys	stat.h	32	chmod	assigns clause	Unknown	assigns \nothing;
 FRAMAC_SHARE/libc/sys	stat.h	32	chmod	from clause	Unknown	assigns \result \from \nothing;
 FRAMAC_SHARE/libc/sys	stat.h	35	fstat	assigns clause	Unknown	assigns \nothing;
diff --git a/gzip124/.frama-c/gzip124.parse/framac.ast b/gzip124/.frama-c/gzip124.parse/framac.ast
index c903aabb0b1ce642a192c490d7496c8a1ddfc75c..c74aec3a42000f8550b8d1c512b7c74343b9e421 100644
--- a/gzip124/.frama-c/gzip124.parse/framac.ast
+++ b/gzip124/.frama-c/gzip124.parse/framac.ast
@@ -314,10 +314,10 @@ int main(int argc, char **argv) __attribute__((__FC_OLDSTYLEPROTO__));
 int (*work)(int infile, int outfile) = & zip;
 static void treat_dir(char *dir) __attribute__((__FC_OLDSTYLEPROTO__));
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -359,10 +359,10 @@ static char *help_help_msg[18] =
    (char *)" -9 --best        compress better",
    (char *)" file...          files to (de)compress. If none given, use standard input.",
    (char *)0};
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -377,8 +377,8 @@ static char *help_help_msg[18] =
 int fprintf_va_2(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -408,10 +408,10 @@ static void help(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -426,8 +426,8 @@ static void help(void)
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -456,10 +456,10 @@ static void license(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -474,9 +474,9 @@ static void license(void)
 int fprintf_va_6(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -539,8 +539,8 @@ static void version(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -553,8 +553,8 @@ static void version(void)
 int fprintf_va_11(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -567,9 +567,9 @@ int fprintf_va_11(FILE * restrict stream, char const * restrict format,
 int fprintf_va_12(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -765,10 +765,10 @@ int main(int argc, char **argv)
   return exit_code;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -783,8 +783,8 @@ int main(int argc, char **argv)
 int fprintf_va_14(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -909,9 +909,9 @@ static void treat_stdin(void)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -926,9 +926,9 @@ static void treat_stdin(void)
 int fprintf_va_18(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -943,9 +943,9 @@ int fprintf_va_18(FILE * restrict stream, char const * restrict format,
 int fprintf_va_19(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -961,8 +961,8 @@ int fprintf_va_19(FILE * restrict stream, char const * restrict format,
 int fprintf_va_20(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -975,10 +975,10 @@ int fprintf_va_20(FILE * restrict stream, char const * restrict format,
 int fprintf_va_21(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -993,9 +993,9 @@ int fprintf_va_21(FILE * restrict stream, char const * restrict format,
 int fprintf_va_22(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1022,8 +1022,8 @@ int fprintf_va_23(FILE * restrict stream, char const * restrict format,
  */
 int fprintf_va_24(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1204,8 +1204,8 @@ static void treat_file(char *iname)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1218,9 +1218,9 @@ static void treat_file(char *iname)
 int fprintf_va_27(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1431,9 +1431,9 @@ static int get_istat(char *iname, struct stat *sbuf)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1448,10 +1448,10 @@ static int get_istat(char *iname, struct stat *sbuf)
 int fprintf_va_29(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1530,9 +1530,9 @@ static int make_ofname(void)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1547,9 +1547,9 @@ static int make_ofname(void)
 int fprintf_va_31(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1564,9 +1564,9 @@ int fprintf_va_31(FILE * restrict stream, char const * restrict format,
 int fprintf_va_32(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1581,9 +1581,9 @@ int fprintf_va_32(FILE * restrict stream, char const * restrict format,
 int fprintf_va_33(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1598,9 +1598,9 @@ int fprintf_va_33(FILE * restrict stream, char const * restrict format,
 int fprintf_va_34(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1615,9 +1615,9 @@ int fprintf_va_34(FILE * restrict stream, char const * restrict format,
 int fprintf_va_35(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1632,9 +1632,9 @@ int fprintf_va_35(FILE * restrict stream, char const * restrict format,
 int fprintf_va_36(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1649,9 +1649,9 @@ int fprintf_va_36(FILE * restrict stream, char const * restrict format,
 int fprintf_va_37(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2129,9 +2129,9 @@ int printf_va_4(char const * restrict format, long param0, long param1);
  */
 int printf_va_5(char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2160,8 +2160,8 @@ int printf_va_6(char const * restrict format, char *param0,
  */
 int printf_va_7(char const * restrict format, long param0, long param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2353,10 +2353,10 @@ static void shorten_name(char *name)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2371,10 +2371,10 @@ static void shorten_name(char *name)
 int fprintf_va_39(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2389,9 +2389,9 @@ int fprintf_va_39(FILE * restrict stream, char const * restrict format,
 int fprintf_va_40(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2430,8 +2430,8 @@ int fprintf_va_42(FILE * restrict stream, char const * restrict format);
  */
 int fprintf_va_43(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2532,8 +2532,8 @@ static int check_ofname(void)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2546,8 +2546,8 @@ static int check_ofname(void)
 int fprintf_va_45(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2583,9 +2583,9 @@ static void copy_stat(struct stat *ifstat)
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2600,10 +2600,10 @@ static void copy_stat(struct stat *ifstat)
 int fprintf_va_47(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -4483,9 +4483,9 @@ int decrypt;
 char *key;
 int pkzip = 0;
 int ext_header = 0;
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -4500,9 +4500,9 @@ int ext_header = 0;
 int fprintf_va_49(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -4517,9 +4517,9 @@ int fprintf_va_49(FILE * restrict stream, char const * restrict format,
 int fprintf_va_50(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -4598,9 +4598,9 @@ int check_zipfile(int in)
 int fprintf_va_52(FILE * restrict stream, char const * restrict format,
                   long param0, long param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -4615,9 +4615,9 @@ int fprintf_va_52(FILE * restrict stream, char const * restrict format,
 int fprintf_va_53(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6199,10 +6199,10 @@ char *add_envopt(int *argcp, char ***argvp, char *env_0)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6225,11 +6225,11 @@ void error(char *m)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6254,8 +6254,8 @@ void warn(char *a, char *b)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6268,8 +6268,8 @@ void warn(char *a, char *b)
 int fprintf_va_59(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6291,8 +6291,8 @@ void read_error(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6638,9 +6638,9 @@ int lzw(int in, int out)
 }
 
 int block_mode = 0x80;
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6655,9 +6655,9 @@ int block_mode = 0x80;
 int fprintf_va_64(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7606,9 +7606,9 @@ static void exchange(char **argv)
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7623,9 +7623,9 @@ static void exchange(char **argv)
 int fprintf_va_66(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7640,9 +7640,9 @@ int fprintf_va_66(FILE * restrict stream, char const * restrict format,
 int fprintf_va_67(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7657,9 +7657,9 @@ int fprintf_va_67(FILE * restrict stream, char const * restrict format,
 int fprintf_va_68(FILE * restrict stream, char const * restrict format,
                   char *param0, int param1, char *param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7674,9 +7674,9 @@ int fprintf_va_68(FILE * restrict stream, char const * restrict format,
 int fprintf_va_69(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7691,9 +7691,9 @@ int fprintf_va_69(FILE * restrict stream, char const * restrict format,
 int fprintf_va_70(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7708,8 +7708,8 @@ int fprintf_va_70(FILE * restrict stream, char const * restrict format,
 int fprintf_va_71(FILE * restrict stream, char const * restrict format,
                   char *param0, int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -7723,8 +7723,8 @@ int fprintf_va_71(FILE * restrict stream, char const * restrict format,
 int fprintf_va_72(FILE * restrict stream, char const * restrict format,
                   char *param0, int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/hiredis/.frama-c/hiredis-format.eva/alarms.csv b/hiredis/.frama-c/hiredis-format.eva/alarms.csv
index b4c6514cba6b44931ebdc5fcaa81887bbe1475f1..4e0fbee19ac8c40f39a22f5dbed9f02c422513eb 100644
--- a/hiredis/.frama-c/hiredis-format.eva/alarms.csv
+++ b/hiredis/.frama-c/hiredis-format.eva/alarms.csv
@@ -221,11 +221,11 @@ directory	file	line	function	property kind	status	property
 .	test.c	981	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	983	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	985	main	mem_access	Unknown	\valid_read(argv + 0)
-.	test.c	1005	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
 .	test.c	1005	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	1005	main	precondition of fprintf_va_2	Unknown	valid_read_string(param0)
 .	test.c	1015	main	precondition of access	Unknown	valid_string_path: valid_read_string(path)
 FRAMAC_SHARE/libc	assert.h	31	__FC_assert	precondition	Unknown	nonnull_c: c ≢ 0
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdlib.h	78	atoi	precondition	Unknown	valid_nptr: \valid_read(nptr)
 FRAMAC_SHARE/libc	stdlib.h	405	free	precondition	Unknown	freeable: p ≡ \null ∨ \freeable(p)
 FRAMAC_SHARE/libc	stdlib.h	422	realloc	precondition	Unknown	freeable: ptr ≡ \null ∨ \freeable(ptr)
@@ -244,4 +244,4 @@ FRAMAC_SHARE/libc	string.h	95	memcpy	precondition	Unknown	valid_dest: valid_or_e
 FRAMAC_SHARE/libc	string.h	96	memcpy	precondition	Unknown	valid_src: valid_read_or_empty(src, n)
 FRAMAC_SHARE/libc	string.h	98	memcpy	precondition	Unknown	separation: \separated((char *)dest + (0 .. n - 1), (char *)src + (0 .. n - 1))
 FRAMAC_SHARE/libc	string.h	128	strlen	precondition	Unknown	valid_string_s: valid_read_string(s)
-FRAMAC_SHARE/libc	unistd.h	738	access	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	739	access	precondition	Unknown	valid_string_path: valid_read_string(path)
diff --git a/hiredis/.frama-c/hiredis-format.parse/framac.ast b/hiredis/.frama-c/hiredis-format.parse/framac.ast
index e046ad1d62472abddd09791be291e70197dd751b..04be4565bd052067a862f3e9f93dd19e652bb233 100644
--- a/hiredis/.frama-c/hiredis-format.parse/framac.ast
+++ b/hiredis/.frama-c/hiredis-format.parse/framac.ast
@@ -1510,11 +1510,11 @@ static int __redisGetSubscribeCallback(redisAsyncContext *ac,
   return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4056,11 +4056,11 @@ int redisNetWrite(redisContext *c)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4323,10 +4323,10 @@ int redisContextSetTimeout(redisContext *c, struct timeval const tv)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4336,11 +4336,11 @@ int redisContextSetTimeout(redisContext *c, struct timeval const tv)
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   int param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4351,11 +4351,11 @@ int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4366,11 +4366,11 @@ int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_5(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4852,10 +4852,10 @@ static void __redisReaderSetError(redisReader *r, int type, char const *str)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4865,10 +4865,10 @@ static void __redisReaderSetError(redisReader *r, int type, char const *str)
 int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
                   int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4876,10 +4876,10 @@ int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4887,10 +4887,10 @@ int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_9(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4898,10 +4898,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_10(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4909,10 +4909,10 @@ int snprintf_va_10(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_11(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4920,10 +4920,10 @@ int snprintf_va_11(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4933,10 +4933,10 @@ int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
 int snprintf_va_13(char * restrict s, size_t n, char const * restrict format,
                    int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -5010,11 +5010,11 @@ static size_t chrtos(char *buf, size_t size, char byte)
   return len;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -7420,8 +7420,8 @@ int printf_va_2(char const * restrict format, int param0);
  */
 int printf_va_3(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11737,8 +11737,8 @@ static void test_blocking_connection(struct config config)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -12847,8 +12847,8 @@ static void test_throughput(struct config config)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/hiredis/.frama-c/hiredis-misc.eva/alarms.csv b/hiredis/.frama-c/hiredis-misc.eva/alarms.csv
index 889c0feda596e7daf3e8e2d5a12777062c4d7700..f3a5cbe640eac8b8c0c12181a561fa60ea5aa0ad 100644
--- a/hiredis/.frama-c/hiredis-misc.eva/alarms.csv
+++ b/hiredis/.frama-c/hiredis-misc.eva/alarms.csv
@@ -67,7 +67,6 @@ directory	file	line	function	property kind	status	property
 .	read.c	67	__redisReaderSetError	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 .	read.c	87	chrtos	precondition of isprint	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
 .	read.c	101	__redisReaderSetErrorProtocolByte	precondition of snprintf_va_15	Unknown	valid_read_string(param0)
-.	read.c	101	snprintf_va_15	precondition	Unknown	valid_read_string(param0)
 .	read.c	130	seekNewline	initialization	Unknown	\initialized(s + pos)
 .	read.c	130	seekNewline	mem_access	Unknown	\valid_read(s + pos)
 .	read.c	135	seekNewline	initialization	Unknown	\initialized(s + (int)(pos + 1))
@@ -303,13 +302,14 @@ directory	file	line	function	property kind	status	property
 .	test.c	981	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	983	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	985	main	mem_access	Unknown	\valid_read(argv + 0)
-.	test.c	1005	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
 .	test.c	1005	main	mem_access	Unknown	\valid_read(argv + 0)
 .	test.c	1005	main	precondition of fprintf_va_2	Unknown	valid_read_string(param0)
 .	test.c	1015	main	precondition of access	Unknown	valid_string_path: valid_read_string(path)
 FRAMAC_SHARE/libc	assert.h	31	__FC_assert	precondition	Invalid or unreachable	nonnull_c: c ≢ 0
 FRAMAC_SHARE/libc	ctype.h	134	isprint	precondition	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
 FRAMAC_SHARE/libc	netdb.h	125	freeaddrinfo	precondition	Unknown	addrinfo_valid: \valid(addrinfo)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_2	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	213	snprintf_va_15	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdlib.h	78	atoi	precondition	Unknown	valid_nptr: \valid_read(nptr)
 FRAMAC_SHARE/libc	stdlib.h	405	free	precondition	Unknown	freeable: p ≡ \null ∨ \freeable(p)
 FRAMAC_SHARE/libc	stdlib.h	422	realloc	precondition	Unknown	freeable: ptr ≡ \null ∨ \freeable(ptr)
@@ -334,7 +334,7 @@ FRAMAC_SHARE/libc	string.h	515	strerror_r	assigns clause	Unknown	assigns \result
 FRAMAC_SHARE/libc	string.h	515	strerror_r	from clause	Unknown	assigns *(strerrbuf + (0 ..)) \from *(strerrbuf + (0 ..)), errnum, buflen;
 FRAMAC_SHARE/libc	string.h	515	strerror_r	from clause	Unknown	assigns \result \from *(strerrbuf + (0 ..)), errnum, buflen;
 FRAMAC_SHARE/libc	strings.h	53	strncasecmp	precondition	Unknown	valid_string_s1: valid_read_nstring(s1, n)
-FRAMAC_SHARE/libc	unistd.h	738	access	precondition	Unknown	valid_string_path: valid_read_string(path)
+FRAMAC_SHARE/libc	unistd.h	739	access	precondition	Unknown	valid_string_path: valid_read_string(path)
 FRAMAC_SHARE/libc/sys	socket.h	334	connect	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	370	getsockopt	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	525	setsockopt	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
diff --git a/hiredis/.frama-c/hiredis-misc.parse/framac.ast b/hiredis/.frama-c/hiredis-misc.parse/framac.ast
index f0b87b434b905573abdb4c49e7b0c353bd0e9c1a..032292764673efcf3e9fc0134d8a5e3c6f7c5424 100644
--- a/hiredis/.frama-c/hiredis-misc.parse/framac.ast
+++ b/hiredis/.frama-c/hiredis-misc.parse/framac.ast
@@ -1510,11 +1510,11 @@ static int __redisGetSubscribeCallback(redisAsyncContext *ac,
   return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4056,11 +4056,11 @@ int redisNetWrite(redisContext *c)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4323,10 +4323,10 @@ int redisContextSetTimeout(redisContext *c, struct timeval const tv)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4336,11 +4336,11 @@ int redisContextSetTimeout(redisContext *c, struct timeval const tv)
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   int param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4351,11 +4351,11 @@ int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4366,11 +4366,11 @@ int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_5(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4852,10 +4852,10 @@ static void __redisReaderSetError(redisReader *r, int type, char const *str)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4865,10 +4865,10 @@ static void __redisReaderSetError(redisReader *r, int type, char const *str)
 int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
                   int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4876,10 +4876,10 @@ int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4887,10 +4887,10 @@ int snprintf_va_8(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_9(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4898,10 +4898,10 @@ int snprintf_va_9(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_10(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4909,10 +4909,10 @@ int snprintf_va_10(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_11(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -4920,10 +4920,10 @@ int snprintf_va_11(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -4933,10 +4933,10 @@ int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
 int snprintf_va_13(char * restrict s, size_t n, char const * restrict format,
                    int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -5010,11 +5010,11 @@ static size_t chrtos(char *buf, size_t size, char byte)
   return len;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -7420,8 +7420,8 @@ int printf_va_2(char const * restrict format, int param0);
  */
 int printf_va_3(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11737,8 +11737,8 @@ static void test_blocking_connection(struct config config)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -12847,8 +12847,8 @@ static void test_throughput(struct config config)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2019_adamovsky_iocccsize_2018.parse/framac.ast b/ioccc/.frama-c/2019_adamovsky_iocccsize_2018.parse/framac.ast
index b8d5bc12f3e51cc06e074001eed7f72484c274e8..97229c1a773418e33bd196eb3f4b8aec85ee0016 100644
--- a/ioccc/.frama-c/2019_adamovsky_iocccsize_2018.parse/framac.ast
+++ b/ioccc/.frama-c/2019_adamovsky_iocccsize_2018.parse/framac.ast
@@ -764,8 +764,8 @@ static int count(int flags)
   return count_0;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -778,8 +778,8 @@ static int count(int flags)
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -792,8 +792,8 @@ int fprintf_va_4(FILE * restrict stream, char const * restrict format,
 int fprintf_va_5(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -806,8 +806,8 @@ int fprintf_va_5(FILE * restrict stream, char const * restrict format,
 int fprintf_va_6(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2019_diels-grabsch2_prog.parse/framac.ast b/ioccc/.frama-c/2019_diels-grabsch2_prog.parse/framac.ast
index a0abf18136ad1c664e9296f8ecf6afa30f821f8b..6cd88574ae02886f6b80788ffb651af0d3930e93 100644
--- a/ioccc/.frama-c/2019_diels-grabsch2_prog.parse/framac.ast
+++ b/ioccc/.frama-c/2019_diels-grabsch2_prog.parse/framac.ast
@@ -261,8 +261,8 @@ static void k(z *a, z *b_0, z *c)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2019_duble_prog.parse/framac.ast b/ioccc/.frama-c/2019_duble_prog.parse/framac.ast
index 0709897fae31c18c27c355e137d6d0bbe29fba25..47c337d89181e0f5f97e11004658b03c1289167e 100644
--- a/ioccc/.frama-c/2019_duble_prog.parse/framac.ast
+++ b/ioccc/.frama-c/2019_duble_prog.parse/framac.ast
@@ -278,9 +278,9 @@ int G(int G_0)
 }
 
 struct termios o;
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param2, (ℤ)param0);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_nstring(param2, param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -295,10 +295,10 @@ struct termios o;
 int printf_va_1(char const * restrict format, char *param0, int param1,
                 char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param8);
+/*@ requires valid_read_nstring(param2, 11);
     requires valid_read_string(param7);
-    requires valid_read_nstring(param2, 11);
+    requires valid_read_string(param8);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2019_iocccsize.parse/framac.ast b/ioccc/.frama-c/2019_iocccsize.parse/framac.ast
index b8d5bc12f3e51cc06e074001eed7f72484c274e8..97229c1a773418e33bd196eb3f4b8aec85ee0016 100644
--- a/ioccc/.frama-c/2019_iocccsize.parse/framac.ast
+++ b/ioccc/.frama-c/2019_iocccsize.parse/framac.ast
@@ -764,8 +764,8 @@ static int count(int flags)
   return count_0;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -778,8 +778,8 @@ static int count(int flags)
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -792,8 +792,8 @@ int fprintf_va_4(FILE * restrict stream, char const * restrict format,
 int fprintf_va_5(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -806,8 +806,8 @@ int fprintf_va_5(FILE * restrict stream, char const * restrict format,
 int fprintf_va_6(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2020_burton_prog.parse/framac.ast b/ioccc/.frama-c/2020_burton_prog.parse/framac.ast
index 3a3e511496e470aa597cea838a562d78eb375423..5fc7393f49025159b8592621c3ce38229bae5855 100644
--- a/ioccc/.frama-c/2020_burton_prog.parse/framac.ast
+++ b/ioccc/.frama-c/2020_burton_prog.parse/framac.ast
@@ -3,8 +3,8 @@
 #include "stdarg.h"
 #include "stdio.h"
 #include "stdlib.h"
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param0, 8);
+/*@ requires valid_read_nstring(param0, 8);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/ioccc/.frama-c/2020_giles_prog.parse/framac.ast b/ioccc/.frama-c/2020_giles_prog.parse/framac.ast
index 58370ce38396d094d20fa534fed63d6415cc4e5e..441c7887e11193a24d90adea57f644b2f079fb1b 100644
--- a/ioccc/.frama-c/2020_giles_prog.parse/framac.ast
+++ b/ioccc/.frama-c/2020_giles_prog.parse/framac.ast
@@ -8,8 +8,8 @@
 #include "strings.h"
 char const *t =
   "Dual-tone multi-frequency signaling(DTMF) is a telecommunication signalingsystem using the voice-frequency bandInvalid WAV input\000Read error\000Cannot read dtmf.bin\000rb\000" + 111;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -22,8 +22,8 @@ char const *t =
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -36,8 +36,8 @@ int fprintf_va_1(FILE * restrict stream, char const * restrict format,
 int fprintf_va_2(FILE * restrict stream, char const * restrict format,
                  char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/itc-benchmarks/.frama-c/01_w_Defects.parse/framac.ast b/itc-benchmarks/.frama-c/01_w_Defects.parse/framac.ast
index 056d1ae163090ec964359386c2d0e04c364e1dc6..bcc7d7b8bf358c64a3080552c4fad07754de434d 100644
--- a/itc-benchmarks/.frama-c/01_w_Defects.parse/framac.ast
+++ b/itc-benchmarks/.frama-c/01_w_Defects.parse/framac.ast
@@ -3686,8 +3686,8 @@ void invalid_memory_access_003(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4753,11 +4753,11 @@ void memory_allocation_failure_007(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4802,8 +4802,8 @@ void memory_allocation_failure_009_func_001(char *buf)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7640,9 +7640,9 @@ void uninit_memory_access_002(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7748,8 +7748,8 @@ void uninit_memory_access_006_func_001(char *dst, char const *src)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7911,11 +7911,11 @@ void uninit_memory_access_010(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -7926,8 +7926,8 @@ void uninit_memory_access_010(void)
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/itc-benchmarks/.frama-c/02_wo_Defects.eva/alarms.csv b/itc-benchmarks/.frama-c/02_wo_Defects.eva/alarms.csv
index 489347a126d4035f244977ee99271af642c1704d..6244b311552892a7851c49fcf38063735f16812a 100644
--- a/itc-benchmarks/.frama-c/02_wo_Defects.eva/alarms.csv
+++ b/itc-benchmarks/.frama-c/02_wo_Defects.eva/alarms.csv
@@ -1,3 +1,3 @@
 directory	file	line	function	property kind	status	property
-02_wo_Defects	uninit_memory_access.c	354	printf_va_29	precondition	Unknown	valid_read_string(param0)
 02_wo_Defects	uninit_memory_access.c	354	uninit_memory_access_011_func_001	precondition of printf_va_29	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_29	precondition	Unknown	valid_read_string(param0)
diff --git a/itc-benchmarks/.frama-c/02_wo_Defects.parse/framac.ast b/itc-benchmarks/.frama-c/02_wo_Defects.parse/framac.ast
index 5b3d1a952501b99c7c2da770f5a5665b5f906da3..25e0673ef82ccc3380b2bf8d99bb34f87bd1309e 100644
--- a/itc-benchmarks/.frama-c/02_wo_Defects.parse/framac.ast
+++ b/itc-benchmarks/.frama-c/02_wo_Defects.parse/framac.ast
@@ -3441,8 +3441,8 @@ void free_nondynamic_allocated_memory_009(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4133,8 +4133,8 @@ void invalid_memory_access_016_func_002(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4147,8 +4147,8 @@ void invalid_memory_access_016_func_002(void)
  */
 int printf_va_14(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4213,8 +4213,8 @@ void invalid_memory_access_017_func_003(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4227,8 +4227,8 @@ void invalid_memory_access_017_func_003(void)
  */
 int printf_va_16(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4828,11 +4828,11 @@ void memory_allocation_failure_007(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -4878,8 +4878,8 @@ void memory_allocation_failure_009_func_001(char *buf_0)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7709,9 +7709,9 @@ void uninit_memory_access_002(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7820,8 +7820,8 @@ void uninit_memory_access_006_func_001(char *dst, char const *src)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7995,11 +7995,11 @@ void uninit_memory_access_010(void)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -8010,8 +8010,8 @@ void uninit_memory_access_010(void)
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8555,8 +8555,8 @@ void uninit_pointer_016_func_002(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8569,8 +8569,8 @@ void uninit_pointer_016_func_002(void)
  */
 int printf_va_31(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/jsmn/.frama-c/jsmn-example.parse/framac.ast b/jsmn/.frama-c/jsmn-example.parse/framac.ast
index da7692b1786c4f5e4fb6cea9d0af21a0440339ba..ccc51f8dc79f4bcc5db4adf248dd167388e1c923 100644
--- a/jsmn/.frama-c/jsmn-example.parse/framac.ast
+++ b/jsmn/.frama-c/jsmn-example.parse/framac.ast
@@ -384,8 +384,8 @@ int printf_va_1(char const * restrict format, int param0);
  */
 int printf_va_2(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -399,8 +399,8 @@ int printf_va_2(char const * restrict format);
  */
 int printf_va_3(char const * restrict format, int param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -414,8 +414,8 @@ int printf_va_3(char const * restrict format, int param0, char *param1);
  */
 int printf_va_4(char const * restrict format, int param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -441,8 +441,8 @@ int printf_va_5(char const * restrict format, int param0, char *param1);
  */
 int printf_va_6(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -456,8 +456,8 @@ int printf_va_6(char const * restrict format);
  */
 int printf_va_7(char const * restrict format, int param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_nstring(param1, param0);
+/*@ requires valid_read_nstring(param1, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/jsmn/.frama-c/jsmn-main.parse/framac.ast b/jsmn/.frama-c/jsmn-main.parse/framac.ast
index 9e5ba9e7423abe8cee770353a74a5e6efd22828b..208708e6fa2acbbf4af040f222e52fe645d027eb 100644
--- a/jsmn/.frama-c/jsmn-main.parse/framac.ast
+++ b/jsmn/.frama-c/jsmn-main.parse/framac.ast
@@ -34,8 +34,8 @@ struct __anonstruct_jsmn_parser_3 {
 typedef struct __anonstruct_jsmn_parser_3 jsmn_parser;
 static int test_passed = 0;
 static int test_failed = 0;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -426,9 +426,9 @@ int printf_va_4(char const * restrict format, int param0, int param1,
 int printf_va_5(char const * restrict format, int param0, int param1,
                 int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_nstring(param2, param1);
     requires valid_read_string(param3);
-    requires valid_read_nstring(param2, param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/kgflags/.frama-c/kgflags-full_api.eva/alarms.csv b/kgflags/.frama-c/kgflags-full_api.eva/alarms.csv
index b1d0289a6a8f7a9fb84a5ea53bd0d9f7c7cb60b1..11e8d0ac679e6225e42e16961f312a26831a7e25 100644
--- a/kgflags/.frama-c/kgflags-full_api.eva/alarms.csv
+++ b/kgflags/.frama-c/kgflags-full_api.eva/alarms.csv
@@ -1,50 +1,32 @@
 directory	file	line	function	property kind	status	property
 .	kgflags.h	402	kgflags_print_errors	initialization	Unknown	\initialized(&err->kind)
-.	kgflags.h	404	fprintf_va_1	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	404	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	404	kgflags_print_errors	precondition of fprintf_va_1	Unknown	valid_read_string(param1)
-.	kgflags.h	408	fprintf_va_2	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	408	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	408	kgflags_print_errors	precondition of fprintf_va_2	Unknown	valid_read_string(param1)
-.	kgflags.h	412	fprintf_va_3	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	412	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	412	kgflags_print_errors	precondition of fprintf_va_3	Unknown	valid_read_string(param1)
-.	kgflags.h	416	fprintf_va_4	precondition	Unknown	valid_read_string(param1)
-.	kgflags.h	416	fprintf_va_4	precondition	Unknown	valid_read_string(param2)
 .	kgflags.h	416	kgflags_print_errors	initialization	Unknown	\initialized(&err->arg)
 .	kgflags.h	416	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	416	kgflags_print_errors	precondition of fprintf_va_4	Unknown	valid_read_string(param1)
 .	kgflags.h	416	kgflags_print_errors	precondition of fprintf_va_4	Unknown	valid_read_string(param2)
-.	kgflags.h	420	fprintf_va_5	precondition	Unknown	valid_read_string(param1)
-.	kgflags.h	420	fprintf_va_5	precondition	Unknown	valid_read_string(param2)
 .	kgflags.h	420	kgflags_print_errors	initialization	Unknown	\initialized(&err->arg)
 .	kgflags.h	420	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	420	kgflags_print_errors	precondition of fprintf_va_5	Unknown	valid_read_string(param1)
 .	kgflags.h	420	kgflags_print_errors	precondition of fprintf_va_5	Unknown	valid_read_string(param2)
-.	kgflags.h	432	fprintf_va_8	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	432	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	432	kgflags_print_errors	precondition of fprintf_va_8	Unknown	valid_read_string(param1)
-.	kgflags.h	436	fprintf_va_9	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	436	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	436	kgflags_print_errors	precondition of fprintf_va_9	Unknown	valid_read_string(param1)
-.	kgflags.h	440	fprintf_va_10	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	440	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	440	kgflags_print_errors	precondition of fprintf_va_10	Unknown	valid_read_string(param1)
-.	kgflags.h	467	fprintf_va_16	precondition	Unknown	valid_read_string(param1)
-.	kgflags.h	467	fprintf_va_16	precondition	Unknown	valid_read_string(param3)
 .	kgflags.h	467	kgflags_print_usage	precondition of fprintf_va_16	Unknown	valid_read_string(param1)
 .	kgflags.h	467	kgflags_print_usage	precondition of fprintf_va_16	Unknown	valid_read_string(param3)
-.	kgflags.h	475	fprintf_va_18	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	475	kgflags_print_usage	precondition of fprintf_va_18	Unknown	valid_read_string(param1)
-.	kgflags.h	482	fprintf_va_20	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	482	kgflags_print_usage	precondition of fprintf_va_20	Unknown	valid_read_string(param1)
-.	kgflags.h	489	fprintf_va_22	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	489	kgflags_print_usage	precondition of fprintf_va_22	Unknown	valid_read_string(param1)
-.	kgflags.h	493	fprintf_va_23	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	493	kgflags_print_usage	precondition of fprintf_va_23	Unknown	valid_read_string(param1)
-.	kgflags.h	497	fprintf_va_24	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	497	kgflags_print_usage	precondition of fprintf_va_24	Unknown	valid_read_string(param1)
-.	kgflags.h	504	fprintf_va_25	precondition	Unknown	valid_read_string(param0)
 .	kgflags.h	504	kgflags_print_usage	precondition of fprintf_va_25	Unknown	valid_read_string(param0)
 .	kgflags.h	522	kgflags_string_array_get_item	mem_access	Unknown	\valid_read(arr->_items + at)
 .	kgflags.h	533	kgflags_int_array_get_item	mem_access	Unknown	\valid_read(arr->_items + at)
@@ -76,15 +58,33 @@ directory	file	line	function	property kind	status	property
 .	kgflags.h	836	_kgflags_parse_flag	signed_overflow	Unknown	count_1 + 1 ≤ 2147483647
 .	kgflags.h	840	_kgflags_parse_flag	mem_access	Unknown	\valid(&arr_1->_items)
 .	kgflags.h	841	_kgflags_parse_flag	mem_access	Unknown	\valid(&arr_1->_count)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_1	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_10	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_16	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_16	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_18	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_2	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_20	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_22	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_23	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_24	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_25	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_3	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_5	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_5	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_8	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_9	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_11	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_6	precondition	Unknown	valid_read_string(param1)
 FRAMAC_SHARE/libc	stdlib.h	98	strtod	precondition	Unknown	valid_nptr: \valid_read(nptr)
 FRAMAC_SHARE/libc	stdlib.h	165	strtol	precondition	Unknown	valid_nptr: \valid_read(nptr)
 FRAMAC_SHARE/libc	string.h	140	strcmp	precondition	Unknown	valid_string_s1: valid_read_string(s1)
 FRAMAC_SHARE/libc	string.h	141	strcmp	precondition	Unknown	valid_string_s2: valid_read_string(s2)
 FRAMAC_SHARE/libc	string.h	223	strstr	precondition	Unknown	valid_string_haystack: valid_read_string(haystack)
 examples	full_api.c	34	main	precondition of printf_va_1	Unknown	valid_read_string(param0)
-examples	full_api.c	34	printf_va_1	precondition	Unknown	valid_read_string(param0)
 examples	full_api.c	37	main	is_nan_or_infinite	Unknown	\is_finite(double_val)
 examples	full_api.c	41	main	precondition of printf_va_6	Unknown	valid_read_string(param1)
-examples	full_api.c	41	printf_va_6	precondition	Unknown	valid_read_string(param1)
 examples	full_api.c	56	main	precondition of printf_va_11	Unknown	valid_read_string(param1)
-examples	full_api.c	56	printf_va_11	precondition	Unknown	valid_read_string(param1)
diff --git a/kgflags/.frama-c/kgflags-full_api.parse/framac.ast b/kgflags/.frama-c/kgflags-full_api.parse/framac.ast
index 4ec9aa46097865a5640556689a0a737e77000907..bf445c8f25c1eeba64f8ff112d3d4ab9fe186ea1 100644
--- a/kgflags/.frama-c/kgflags-full_api.parse/framac.ast
+++ b/kgflags/.frama-c/kgflags-full_api.parse/framac.ast
@@ -387,9 +387,9 @@ _Bool kgflags_parse(int argc, char **argv)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -404,9 +404,9 @@ _Bool kgflags_parse(int argc, char **argv)
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -421,9 +421,9 @@ int fprintf_va_1(FILE * restrict stream, char const * restrict format,
 int fprintf_va_2(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -438,10 +438,10 @@ int fprintf_va_2(FILE * restrict stream, char const * restrict format,
 int fprintf_va_3(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -456,10 +456,10 @@ int fprintf_va_3(FILE * restrict stream, char const * restrict format,
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -498,9 +498,9 @@ int fprintf_va_6(FILE * restrict stream, char const * restrict format);
  */
 int fprintf_va_7(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -515,9 +515,9 @@ int fprintf_va_7(FILE * restrict stream, char const * restrict format);
 int fprintf_va_8(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -532,9 +532,9 @@ int fprintf_va_8(FILE * restrict stream, char const * restrict format,
 int fprintf_va_9(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -628,8 +628,8 @@ void kgflags_print_errors(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -642,8 +642,8 @@ void kgflags_print_errors(void)
 int fprintf_va_11(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -668,10 +668,10 @@ int fprintf_va_12(FILE * restrict stream, char const * restrict format,
  */
 int fprintf_va_13(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -686,8 +686,8 @@ int fprintf_va_13(FILE * restrict stream, char const * restrict format);
 int fprintf_va_14(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -700,12 +700,12 @@ int fprintf_va_14(FILE * restrict stream, char const * restrict format,
 int fprintf_va_15(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param4);
-    requires valid_read_string(param3);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(param3);
+    requires valid_read_string(param4);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -723,8 +723,8 @@ int fprintf_va_16(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2, char *param3,
                   char *param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -737,10 +737,10 @@ int fprintf_va_16(FILE * restrict stream, char const * restrict format,
 int fprintf_va_17(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -768,10 +768,10 @@ int fprintf_va_18(FILE * restrict stream, char const * restrict format,
 int fprintf_va_19(FILE * restrict stream, char const * restrict format,
                   int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -799,10 +799,10 @@ int fprintf_va_20(FILE * restrict stream, char const * restrict format,
 int fprintf_va_21(FILE * restrict stream, char const * restrict format,
                   double param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -817,10 +817,10 @@ int fprintf_va_21(FILE * restrict stream, char const * restrict format,
 int fprintf_va_22(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -835,10 +835,10 @@ int fprintf_va_22(FILE * restrict stream, char const * restrict format,
 int fprintf_va_23(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -853,8 +853,8 @@ int fprintf_va_23(FILE * restrict stream, char const * restrict format,
 int fprintf_va_24(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1513,8 +1513,8 @@ static void _kgflags_parse_flag(_kgflags_flag_t *flag, _Bool prefix_no)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1527,8 +1527,8 @@ static void _kgflags_parse_flag(_kgflags_flag_t *flag, _Bool prefix_no)
  */
 int printf_va_1(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1580,8 +1580,8 @@ int printf_va_4(char const * restrict format, double param0);
  */
 int printf_va_5(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1649,8 +1649,8 @@ int printf_va_9(char const * restrict format, int param0);
  */
 int printf_va_10(char const * restrict format, int param0, double param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/kgflags/.frama-c/kgflags-simple.eva/alarms.csv b/kgflags/.frama-c/kgflags-simple.eva/alarms.csv
index 0943c4b6b78e69fb5936c531bd0e90cfa065d73d..78461d6aa7a644e5d7f8d9ea1fee9d6aac8142ca 100644
--- a/kgflags/.frama-c/kgflags-simple.eva/alarms.csv
+++ b/kgflags/.frama-c/kgflags-simple.eva/alarms.csv
@@ -1,36 +1,36 @@
 directory	file	line	function	property kind	status	property
 .	kgflags.h	402	kgflags_print_errors	initialization	Unknown	\initialized(&err->kind)
-.	kgflags.h	404	fprintf_va_1	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	404	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	404	kgflags_print_errors	precondition of fprintf_va_1	Unknown	valid_read_string(param1)
-.	kgflags.h	408	fprintf_va_2	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	408	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	408	kgflags_print_errors	precondition of fprintf_va_2	Unknown	valid_read_string(param1)
-.	kgflags.h	412	fprintf_va_3	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	412	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	412	kgflags_print_errors	precondition of fprintf_va_3	Unknown	valid_read_string(param1)
-.	kgflags.h	416	fprintf_va_4	precondition	Unknown	valid_read_string(param1)
-.	kgflags.h	416	fprintf_va_4	precondition	Unknown	valid_read_string(param2)
 .	kgflags.h	416	kgflags_print_errors	initialization	Unknown	\initialized(&err->arg)
 .	kgflags.h	416	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	416	kgflags_print_errors	precondition of fprintf_va_4	Unknown	valid_read_string(param1)
 .	kgflags.h	416	kgflags_print_errors	precondition of fprintf_va_4	Unknown	valid_read_string(param2)
-.	kgflags.h	420	fprintf_va_5	precondition	Unknown	valid_read_string(param1)
-.	kgflags.h	420	fprintf_va_5	precondition	Unknown	valid_read_string(param2)
 .	kgflags.h	420	kgflags_print_errors	initialization	Unknown	\initialized(&err->arg)
 .	kgflags.h	420	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	420	kgflags_print_errors	precondition of fprintf_va_5	Unknown	valid_read_string(param1)
 .	kgflags.h	420	kgflags_print_errors	precondition of fprintf_va_5	Unknown	valid_read_string(param2)
-.	kgflags.h	432	fprintf_va_8	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	432	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	432	kgflags_print_errors	precondition of fprintf_va_8	Unknown	valid_read_string(param1)
-.	kgflags.h	436	fprintf_va_9	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	436	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	436	kgflags_print_errors	precondition of fprintf_va_9	Unknown	valid_read_string(param1)
-.	kgflags.h	440	fprintf_va_10	precondition	Unknown	valid_read_string(param1)
 .	kgflags.h	440	kgflags_print_errors	initialization	Unknown	\initialized(&err->flag_name)
 .	kgflags.h	440	kgflags_print_errors	precondition of fprintf_va_10	Unknown	valid_read_string(param1)
 .	kgflags.h	608	_kgflags_get_flag	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_1	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_10	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_2	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_3	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_4	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_5	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_5	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_8	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_9	precondition	Unknown	valid_read_string(param1)
 FRAMAC_SHARE/libc	stdio.h	336	puts	precondition	Unknown	valid_string_s: valid_read_string(s)
 FRAMAC_SHARE/libc	string.h	140	strcmp	precondition	Unknown	valid_string_s1: valid_read_string(s1)
 examples	simple.c	12	main	precondition of puts	Unknown	valid_string_s: valid_read_string(s)
diff --git a/kgflags/.frama-c/kgflags-simple.parse/framac.ast b/kgflags/.frama-c/kgflags-simple.parse/framac.ast
index ada7e64d9e5c0854bb6efdd9c7082bd36135a84d..117d0ece9e14a24ed3e5bd320cb340e614ac969a 100644
--- a/kgflags/.frama-c/kgflags-simple.parse/framac.ast
+++ b/kgflags/.frama-c/kgflags-simple.parse/framac.ast
@@ -387,9 +387,9 @@ _Bool kgflags_parse(int argc, char **argv)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -404,9 +404,9 @@ _Bool kgflags_parse(int argc, char **argv)
 int fprintf_va_1(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -421,9 +421,9 @@ int fprintf_va_1(FILE * restrict stream, char const * restrict format,
 int fprintf_va_2(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -438,10 +438,10 @@ int fprintf_va_2(FILE * restrict stream, char const * restrict format,
 int fprintf_va_3(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -456,10 +456,10 @@ int fprintf_va_3(FILE * restrict stream, char const * restrict format,
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -498,9 +498,9 @@ int fprintf_va_6(FILE * restrict stream, char const * restrict format);
  */
 int fprintf_va_7(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -515,9 +515,9 @@ int fprintf_va_7(FILE * restrict stream, char const * restrict format);
 int fprintf_va_8(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -532,9 +532,9 @@ int fprintf_va_8(FILE * restrict stream, char const * restrict format,
 int fprintf_va_9(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -628,8 +628,8 @@ void kgflags_print_errors(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -642,8 +642,8 @@ void kgflags_print_errors(void)
 int fprintf_va_11(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -668,10 +668,10 @@ int fprintf_va_12(FILE * restrict stream, char const * restrict format,
  */
 int fprintf_va_13(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -686,8 +686,8 @@ int fprintf_va_13(FILE * restrict stream, char const * restrict format);
 int fprintf_va_14(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -700,12 +700,12 @@ int fprintf_va_14(FILE * restrict stream, char const * restrict format,
 int fprintf_va_15(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param4);
-    requires valid_read_string(param3);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(param3);
+    requires valid_read_string(param4);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -723,8 +723,8 @@ int fprintf_va_16(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2, char *param3,
                   char *param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -737,10 +737,10 @@ int fprintf_va_16(FILE * restrict stream, char const * restrict format,
 int fprintf_va_17(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -768,10 +768,10 @@ int fprintf_va_18(FILE * restrict stream, char const * restrict format,
 int fprintf_va_19(FILE * restrict stream, char const * restrict format,
                   int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -799,10 +799,10 @@ int fprintf_va_20(FILE * restrict stream, char const * restrict format,
 int fprintf_va_21(FILE * restrict stream, char const * restrict format,
                   double param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -817,10 +817,10 @@ int fprintf_va_21(FILE * restrict stream, char const * restrict format,
 int fprintf_va_22(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -835,10 +835,10 @@ int fprintf_va_22(FILE * restrict stream, char const * restrict format,
 int fprintf_va_23(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -853,8 +853,8 @@ int fprintf_va_23(FILE * restrict stream, char const * restrict format,
 int fprintf_va_24(FILE * restrict stream, char const * restrict format,
                   char *param0, char *param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/kilo/.frama-c/kilo.eva/alarms.csv b/kilo/.frama-c/kilo.eva/alarms.csv
index 1eae36162287445f880b6f06d1525932e7cbd347..b900aa5024a5d1034ba85807b71adba6cd39d16a 100644
--- a/kilo/.frama-c/kilo.eva/alarms.csv
+++ b/kilo/.frama-c/kilo.eva/alarms.csv
@@ -8,7 +8,6 @@ directory	file	line	function	property kind	status	property
 .	kilo.c	310	getCursorPosition	initialization	Unknown	\initialized((char *)buf)
 .	kilo.c	310	getCursorPosition	initialization	Unknown	\initialized(&buf[1])
 .	kilo.c	311	getCursorPosition	precondition of sscanf_va_1	Unknown	valid_read_string(s)
-.	kilo.c	311	sscanf_va_1	precondition	Unknown	valid_read_string(s)
 .	kilo.c	321	getWindowSize	initialization	Unknown	\initialized(&ws.ws_col)
 .	kilo.c	336	getWindowSize	initialization	Unknown	\initialized(&orig_col)
 .	kilo.c	336	getWindowSize	initialization	Unknown	\initialized(&orig_row)
@@ -401,8 +400,6 @@ directory	file	line	function	property kind	status	property
 .	kilo.c	800	editorOpen	mem_access	Unknown	\valid(line + linelen)
 .	kilo.c	813	editorSave	precondition of __va_open_mode_t	Unknown	valid_filename: valid_read_string(filename)
 .	kilo.c	819	editorSave	precondition of write	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
-.	kilo.c	819	editorSave	precondition of write	Unknown	valid_fd: 0 ≤ fd < 1024
-.	kilo.c	829	editorSave	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
 .	kilo.c	848	abAppend	signed_overflow	Unknown	-2147483648 ≤ ab->len + len
 .	kilo.c	848	abAppend	signed_overflow	Unknown	ab->len + len ≤ 2147483647
 .	kilo.c	851	abAppend	precondition of memcpy	Unknown	valid_dest: valid_or_empty(dest, n)
@@ -429,7 +426,6 @@ directory	file	line	function	property kind	status	property
 .	kilo.c	904	editorRefreshScreen	initialization	Unknown	\initialized(c + j)
 .	kilo.c	904	editorRefreshScreen	mem_access	Unknown	\valid_read(c + j)
 .	kilo.c	937	editorRefreshScreen	precondition of snprintf_va_4	Unknown	valid_read_nstring(param0, 20)
-.	kilo.c	937	snprintf_va_4	precondition	Unknown	valid_read_nstring(param0, 20)
 .	kilo.c	940	editorRefreshScreen	signed_overflow	Unknown	(int)(E.rowoff + E.cy) + 1 ≤ 2147483647
 .	kilo.c	940	editorRefreshScreen	signed_overflow	Unknown	-2147483648 ≤ E.rowoff + E.cy
 .	kilo.c	940	editorRefreshScreen	signed_overflow	Unknown	E.rowoff + E.cy ≤ 2147483647
@@ -560,9 +556,11 @@ directory	file	line	function	property kind	status	property
 FRAMAC_SHARE/libc	ctype.h	94	isdigit	precondition	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
 FRAMAC_SHARE/libc	ctype.h	134	isprint	precondition	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
 FRAMAC_SHARE/libc	ctype.h	161	isspace	precondition	Unknown	c_uchar_or_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
-FRAMAC_SHARE/libc	fcntl.h	161	__va_open_mode_t	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	fcntl.h	165	__va_open_mode_t	precondition	Unknown	valid_filename: valid_read_string(filename)
 FRAMAC_SHARE/libc	stdio.c	68	getline	mem_access	Unknown	\valid(*lineptr + tmp_2)
 FRAMAC_SHARE/libc	stdio.c	71	getline	mem_access	Unknown	\valid(*lineptr + cur)
+FRAMAC_SHARE/libc	stdio.h	213	snprintf_va_4	precondition	Unknown	valid_read_nstring(param0, 20)
+FRAMAC_SHARE/libc	stdio.h	217	sscanf_va_1	precondition	Unknown	valid_read_string(s)
 FRAMAC_SHARE/libc	stdlib.h	405	free	precondition	Unknown	freeable: p ≡ \null ∨ \freeable(p)
 FRAMAC_SHARE/libc	stdlib.h	422	realloc	precondition	Unknown	freeable: ptr ≡ \null ∨ \freeable(ptr)
 FRAMAC_SHARE/libc	string.c	153	memcmp	initialization	Unknown	\initialized(p1 + i)
@@ -582,8 +580,6 @@ FRAMAC_SHARE/libc	string.h	107	memmove	precondition	Unknown	valid_dest: valid_or
 FRAMAC_SHARE/libc	string.h	108	memmove	precondition	Unknown	valid_src: valid_read_or_empty(src, n)
 FRAMAC_SHARE/libc	string.h	118	memset	precondition	Unknown	valid_s: valid_or_empty(s, n)
 FRAMAC_SHARE/libc	string.h	128	strlen	precondition	Unknown	valid_string_s: valid_read_string(s)
-FRAMAC_SHARE/libc	unistd.h	782	close	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	866	ftruncate	assigns clause	Unknown	assigns \nothing;
-FRAMAC_SHARE/libc	unistd.h	866	ftruncate	from clause	Unknown	assigns \result \from \nothing;
-FRAMAC_SHARE/libc	unistd.h	1139	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	867	ftruncate	assigns clause	Unknown	assigns \nothing;
+FRAMAC_SHARE/libc	unistd.h	867	ftruncate	from clause	Unknown	assigns \result \from \nothing;
+FRAMAC_SHARE/libc	unistd.h	1141	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
diff --git a/kilo/.frama-c/kilo.parse/framac.ast b/kilo/.frama-c/kilo.parse/framac.ast
index ad5b53df4ae9030a8ad2d82fd474147ec119cbbf..92dd523ae9767a74d2be1ae33a55ba58c2b3d38e 100644
--- a/kilo/.frama-c/kilo.parse/framac.ast
+++ b/kilo/.frama-c/kilo.parse/framac.ast
@@ -250,12 +250,12 @@ int editorReadKey(int fd)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param1);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
     assigns \result, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -305,10 +305,10 @@ int getCursorPosition(int ifd, int ofd, int *rows, int *cols)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -988,11 +988,11 @@ void abFree(struct abuf *ab)
   return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -1003,10 +1003,10 @@ void abFree(struct abuf *ab)
 int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
                   char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -1016,12 +1016,12 @@ int snprintf_va_2(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   int param0);
 
-/*@ requires
+/*@ requires valid_read_nstring(param0, 20);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param2);
-    requires valid_read_nstring(param0, 20);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -1034,10 +1034,10 @@ int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
                   char *param0, int param1, char *param2);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -1048,10 +1048,10 @@ int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_5(char * restrict s, size_t n, char const * restrict format,
                   int param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
diff --git a/libmodbus/.frama-c/libmodbus-random-client.parse/framac.ast b/libmodbus/.frama-c/libmodbus-random-client.parse/framac.ast
index b2b422227ddf7a7499a07fd638d77706e0782d3f..628a0fc6d8b2c149c13c573ec8467a4bcead7ff1 100644
--- a/libmodbus/.frama-c/libmodbus-random-client.parse/framac.ast
+++ b/libmodbus/.frama-c/libmodbus-random-client.parse/framac.ast
@@ -1266,8 +1266,8 @@ static int _modbus_rtu_check_integrity(modbus_t *ctx, uint8_t *msg,
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1283,9 +1283,9 @@ static int _modbus_rtu_check_integrity(modbus_t *ctx, uint8_t *msg,
 int printf_va_3(char const * restrict format, char *param0, int param1,
                 int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1300,8 +1300,8 @@ int printf_va_3(char const * restrict format, char *param0, int param1,
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2039,8 +2039,8 @@ static int _connect(int sockfd, struct sockaddr const *addr,
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2091,8 +2091,8 @@ static int _modbus_tcp_connect(modbus_t *ctx)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2105,9 +2105,9 @@ static int _modbus_tcp_connect(modbus_t *ctx)
 int fprintf_va_13(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2261,8 +2261,8 @@ int modbus_tcp_listen(modbus_t *ctx, int nb_connection)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2365,8 +2365,8 @@ int modbus_tcp_pi_listen(modbus_t *ctx, int nb_connection)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2754,8 +2754,8 @@ char const *modbus_strerror(int errnum)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2768,8 +2768,8 @@ char const *modbus_strerror(int errnum)
 int fprintf_va_22(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -5114,8 +5114,8 @@ void modbus_mapping_free(modbus_mapping_t *mb_mapping)
   return_label: return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/libmodbus/.frama-c/libmodbus-unit-server.eva/alarms.csv b/libmodbus/.frama-c/libmodbus-unit-server.eva/alarms.csv
index d74111ba7923d253421bb78e77f888b5baa7e427..eb5c38287ffe9157eca066dd3bf0b64f16d01d62 100644
--- a/libmodbus/.frama-c/libmodbus-unit-server.eva/alarms.csv
+++ b/libmodbus/.frama-c/libmodbus-unit-server.eva/alarms.csv
@@ -1,19 +1,15 @@
 directory	file	line	function	property kind	status	property
-FRAMAC_SHARE/libc	__fc_select.h	48	select	precondition	Unknown	nfds: nfds ≥ 0
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_15	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	string.c	130	strcmp	mem_access	Unknown	\valid_read(s1 + i)
 FRAMAC_SHARE/libc	string.c	133	strcmp	mem_access	Unknown	\valid_read((unsigned char *)s1 + i)
 FRAMAC_SHARE/libc	string.h	95	memcpy	precondition	Unknown	valid_dest: valid_or_empty(dest, n)
 FRAMAC_SHARE/libc	string.h	96	memcpy	precondition	Unknown	valid_src: valid_read_or_empty(src, n)
 FRAMAC_SHARE/libc	time.h	288	nanosleep	precondition	Unknown	valid_nanosecs: 0 ≤ rqtp->tv_nsec < 1000000000
-FRAMAC_SHARE/libc	unistd.h	782	close	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1006	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
-FRAMAC_SHARE/libc	unistd.h	1139	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1008	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1141	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
 FRAMAC_SHARE/libc/sys	socket.h	301	accept	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	436	recv	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	437	recv	precondition	Unknown	valid_buffer_length: \valid((char *)buf + (0 .. len - 1))
-FRAMAC_SHARE/libc/sys	socket.h	493	send	precondition	Unknown	available_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	494	send	precondition	Unknown	buf_len_ok: \valid_read((char *)buf + (0 .. len - 1))
 src	modbus-data.c	89	modbus_set_bits_from_bytes	initialization	Unknown	\initialized(tab_byte + (unsigned int)((unsigned int)(i - (unsigned int)idx) / 8))
 src	modbus-data.c	89	modbus_set_bits_from_bytes	mem_access	Unknown	\valid(dest + i)
@@ -26,20 +22,13 @@ src	modbus-rtu.c	158	_modbus_rtu_send_msg_pre	mem_access	Unknown	\valid(req + tm
 src	modbus-rtu.c	159	_modbus_rtu_send_msg_pre	signed_overflow	Unknown	req_length + 1 ≤ 2147483647
 src	modbus-rtu.c	159	_modbus_rtu_send_msg_pre	mem_access	Unknown	\valid(req + tmp_1)
 src	modbus-rtu.c	297	_modbus_rtu_send	precondition of write	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
-src	modbus-rtu.c	297	_modbus_rtu_send	precondition of write	Unknown	valid_fd: 0 ≤ fd < 1024
 src	modbus-rtu.c	332	_modbus_rtu_recv	precondition of read	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
-src	modbus-rtu.c	332	_modbus_rtu_recv	precondition of read	Unknown	valid_fd: 0 ≤ fd < 1024
 src	modbus-rtu.c	364	_modbus_rtu_check_integrity	initialization	Unknown	\initialized(msg + 0)
 src	modbus-rtu.c	376	_modbus_rtu_check_integrity	signed_overflow	Unknown	-2147483648 ≤ msg_length - 2
 src	modbus-rtu.c	377	_modbus_rtu_check_integrity	initialization	Unknown	\initialized(msg + (int)(msg_length - 1))
 src	modbus-rtu.c	377	_modbus_rtu_check_integrity	initialization	Unknown	\initialized(msg + (int)(msg_length - 2))
 src	modbus-rtu.c	377	_modbus_rtu_check_integrity	mem_access	Unknown	\valid_read(msg + (int)(msg_length - 1))
 src	modbus-rtu.c	377	_modbus_rtu_check_integrity	mem_access	Unknown	\valid_read(msg + (int)(msg_length - 2))
-src	modbus-rtu.c	718	_modbus_rtu_connect	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
-src	modbus-rtu.c	892	_modbus_rtu_connect	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
-src	modbus-rtu.c	1126	_modbus_rtu_close	precondition of close	Unknown	valid_fd: 0 ≤ fd < 1024
-src	modbus-rtu.c	1159	_modbus_rtu_select	precondition of select	Unknown	nfds: nfds ≥ 0
-src	modbus-rtu.c	1159	_modbus_rtu_select	signed_overflow	Unknown	ctx->s + 1 ≤ 2147483647
 src	modbus-tcp.c	152	_modbus_tcp_prepare_response_tid	initialization	Unknown	\initialized(req + 0)
 src	modbus-tcp.c	152	_modbus_tcp_prepare_response_tid	initialization	Unknown	\initialized(req + 1)
 src	modbus-tcp.c	158	_modbus_tcp_send_msg_pre	signed_overflow	Unknown	-2147483648 ≤ req_length - 6
@@ -113,11 +102,9 @@ src	modbus.c	1012	modbus_reply_exception	initialization	Unknown	\initialized(req
 src	modbus.c	1013	modbus_reply_exception	initialization	Unknown	\initialized(req + offset)
 tests	unit-test-server.c	44	main	mem_access	Unknown	\valid_read(argv + 1)
 tests	unit-test-server.c	51	main	precondition of printf_va_15	Unknown	valid_read_string(param0)
-tests	unit-test-server.c	51	printf_va_15	precondition	Unknown	valid_read_string(param0)
 tests	unit-test-server.c	127	main	initialization	Unknown	\initialized(query + header_length)
 tests	unit-test-server.c	130	main	initialization	Unknown	\initialized(query + (int)((int)(header_length + 3) + 1))
 tests	unit-test-server.c	130	main	initialization	Unknown	\initialized(query + (int)(header_length + 3))
 tests	unit-test-server.c	135	main	initialization	Unknown	\initialized(query + (int)((int)(header_length + 1) + 1))
 tests	unit-test-server.c	135	main	initialization	Unknown	\initialized(query + (int)(header_length + 1))
 tests	unit-test-server.c	170	main	initialization	Unknown	\initialized(query + 1)
-tests	unit-test-server.c	174	main	precondition of send	Unknown	available_sockfd: 0 ≤ sockfd < 1024
diff --git a/libmodbus/.frama-c/libmodbus-unit-server.eva/metrics.log b/libmodbus/.frama-c/libmodbus-unit-server.eva/metrics.log
index 7871002540da383262fa63e8963d167dd31b5a24..cad935bfcd541062bddad2833c71772d94267d36 100644
--- a/libmodbus/.frama-c/libmodbus-unit-server.eva/metrics.log
+++ b/libmodbus/.frama-c/libmodbus-unit-server.eva/metrics.log
@@ -26,7 +26,7 @@ Initializer of _modbus_tcp_pi_backend references _modbus_tcp_pre_check_confirmat
 Initializer of _modbus_tcp_pi_backend references _modbus_tcp_pi_connect (at src/modbus-tcp.c:774)
 [metrics] Statements analyzed by Eva
 --------------------------
-1581 stmts in analyzed functions, 1277 stmts analyzed (80.8%)
+1581 stmts in analyzed functions, 1275 stmts analyzed (80.6%)
 _error_print: 9 stmts out of 9 (100.0%)
 _modbus_init_common: 9 stmts out of 9 (100.0%)
 _modbus_rtu_build_response_basis: 4 stmts out of 4 (100.0%)
@@ -58,7 +58,7 @@ response_exception: 13 stmts out of 13 (100.0%)
 response_io_status: 24 stmts out of 24 (100.0%)
 modbus_reply: 375 stmts out of 381 (98.4%)
 _modbus_rtu_check_integrity: 22 stmts out of 23 (95.7%)
-main: 122 stmts out of 130 (93.8%)
+main: 120 stmts out of 130 (92.3%)
 modbus_tcp_pi_listen: 66 stmts out of 72 (91.7%)
 modbus_tcp_listen: 33 stmts out of 38 (86.8%)
 _modbus_receive_msg: 76 stmts out of 95 (80.0%)
diff --git a/libmodbus/.frama-c/libmodbus-unit-server.parse/framac.ast b/libmodbus/.frama-c/libmodbus-unit-server.parse/framac.ast
index 26a47f07a6307bbc24721d185496ce0cdf77c33c..8458a27fd0f3fafdb03c629e8e2f11e28dd84866 100644
--- a/libmodbus/.frama-c/libmodbus-unit-server.parse/framac.ast
+++ b/libmodbus/.frama-c/libmodbus-unit-server.parse/framac.ast
@@ -1272,8 +1272,8 @@ static int _modbus_rtu_check_integrity(modbus_t *ctx, uint8_t *msg,
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1289,9 +1289,9 @@ static int _modbus_rtu_check_integrity(modbus_t *ctx, uint8_t *msg,
 int printf_va_3(char const * restrict format, char *param0, int param1,
                 int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -1306,8 +1306,8 @@ int printf_va_3(char const * restrict format, char *param0, int param1,
 int fprintf_va_4(FILE * restrict stream, char const * restrict format,
                  char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2045,8 +2045,8 @@ static int _connect(int sockfd, struct sockaddr const *addr,
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2097,8 +2097,8 @@ static int _modbus_tcp_connect(modbus_t *ctx)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2111,9 +2111,9 @@ static int _modbus_tcp_connect(modbus_t *ctx)
 int fprintf_va_13(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2267,8 +2267,8 @@ int modbus_tcp_listen(modbus_t *ctx, int nb_connection)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2371,8 +2371,8 @@ int modbus_tcp_pi_listen(modbus_t *ctx, int nb_connection)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2760,8 +2760,8 @@ char const *modbus_strerror(int errnum)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -2774,8 +2774,8 @@ char const *modbus_strerror(int errnum)
 int fprintf_va_22(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -5151,8 +5151,8 @@ uint32_t const UT_IREAL_ABCD = (unsigned int)0x0020F147;
 uint32_t const UT_IREAL_DCBA = (unsigned int)0x47F12000;
 uint32_t const UT_IREAL_BADC = (unsigned int)0x200047F1;
 uint32_t const UT_IREAL_CDAB = 0xF1470020;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -5165,8 +5165,8 @@ uint32_t const UT_IREAL_CDAB = 0xF1470020;
  */
 int printf_va_15(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -5179,8 +5179,8 @@ int printf_va_15(char const * restrict format, char *param0);
 int fprintf_va_38(FILE * restrict stream, char const * restrict format,
                   char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -5266,8 +5266,8 @@ int fprintf_va_40(FILE * restrict stream, char const * restrict format);
  */
 int printf_va_20(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/libspng/.frama-c/libspng-example.eva/alarms.csv b/libspng/.frama-c/libspng-example.eva/alarms.csv
index 22edbb87498e46541da1097a7043549ae35736fc..3f997649d64b1cfe13d2a9cffcef2adfc3bc0728 100644
--- a/libspng/.frama-c/libspng-example.eva/alarms.csv
+++ b/libspng/.frama-c/libspng-example.eva/alarms.csv
@@ -160,6 +160,7 @@ directory	file	line	function	property kind	status	property
 .	spng.c	2304	spng_ctx_free	initialization	Unknown	\initialized(&(ctx->splt_list + i)->entries)
 .	spng.c	2304	spng_ctx_free	mem_access	Unknown	\valid_read(&(ctx->splt_list + i)->entries)
 FRAMAC_SHARE/libc	stdio.h	150	fopen	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_2	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdio.h	351	fread	precondition	Unknown	valid_ptr_block: \valid((char *)ptr + (0 .. nmemb * size - 1))
 FRAMAC_SHARE/libc	stdlib.h	405	free	precondition	Unknown	freeable: p ≡ \null ∨ \freeable(p)
 FRAMAC_SHARE/libc	string.h	55	memcmp	precondition	Unknown	valid_s1: valid_read_or_empty(s1, n)
@@ -178,7 +179,6 @@ FRAMAC_SHARE/libc	string.h	223	strstr	precondition	Unknown	valid_string_haystack
 examples	example.c	20	main	mem_access	Unknown	\valid_read(argv + 1)
 examples	example.c	20	main	precondition of fopen	Unknown	valid_filename: valid_read_string(filename)
 examples	example.c	23	main	precondition of printf_va_2	Unknown	valid_read_string(param0)
-examples	example.c	23	printf_va_2	precondition	Unknown	valid_read_string(param0)
 examples	example.c	41	main	precondition of fread	Unknown	valid_ptr_block: \valid((char *)ptr + (0 .. nmemb * size - 1))
 examples	example.c	120	main	dangling_pointer	Unknown	¬\dangling(&out)
 tests	framac_stubs.h	78	crc32	ptr_comparison	Unknown	\pointer_comparable((void *)buf, (void *)0)
diff --git a/libspng/.frama-c/libspng-example.parse/framac.ast b/libspng/.frama-c/libspng-example.parse/framac.ast
index 27ff96afe66e6feb1b96de10afe94045f6c0d274..f50f562b6c6cd9aceccf319f3c8cd83dfb16fd87 100644
--- a/libspng/.frama-c/libspng-example.parse/framac.ast
+++ b/libspng/.frama-c/libspng-example.parse/framac.ast
@@ -482,8 +482,8 @@ char const *spng_version_string(void);
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -532,8 +532,8 @@ int printf_va_4(char const * restrict format);
  */
 int printf_va_5(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -546,8 +546,8 @@ int printf_va_5(char const * restrict format);
  */
 int printf_va_6(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -560,8 +560,8 @@ int printf_va_6(char const * restrict format, char *param0);
  */
 int printf_va_7(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -574,8 +574,8 @@ int printf_va_7(char const * restrict format, char *param0);
  */
 int printf_va_8(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param4);
+/*@ requires valid_read_string(param4);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -606,8 +606,8 @@ int printf_va_9(char const * restrict format, unsigned int param0,
 int printf_va_10(char const * restrict format, int param0, int param1,
                  int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/libyaml/.frama-c/test-reader.eva/alarms.csv b/libyaml/.frama-c/test-reader.eva/alarms.csv
index 31993b94367221a0ae109a4228a63d24f1e05ff0..ee30efedb64da8ba25569f090f4732185357ca74 100644
--- a/libyaml/.frama-c/test-reader.eva/alarms.csv
+++ b/libyaml/.frama-c/test-reader.eva/alarms.csv
@@ -1,5 +1,13 @@
 directory	file	line	function	property kind	status	property
 FRAMAC_SHARE/libc	assert.h	31	__FC_assert	precondition	Unknown	nonnull_c: c ≢ 0
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_12	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_14	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_18	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_22	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_25	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_29	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_6	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_7	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	string.h	55	memcmp	precondition	Unknown	valid_s1: valid_read_or_empty(s1, n)
 FRAMAC_SHARE/libc	string.h	57	memcmp	precondition	Unknown	initialization: s1: \initialized((char *)s1 + (0 .. n - 1))
 FRAMAC_SHARE/libc	string.h	59	memcmp	precondition	Unknown	danglingness: s1: non_escaping(s1, n)
@@ -94,20 +102,16 @@ tests	test-reader.c	131	check_utf8_sequences	mem_access	Unknown	\valid_read(end)
 tests	test-reader.c	133	check_utf8_sequences	differing_blocks	Unknown	\base_addr(end) ≡ \base_addr(start)
 tests	test-reader.c	137	check_utf8_sequences	signed_overflow	Unknown	failed + 1 ≤ 2147483647
 tests	test-reader.c	147	check_utf8_sequences	precondition of printf_va_6	Unknown	valid_read_string(param0)
-tests	test-reader.c	147	printf_va_6	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	151	check_utf8_sequences	precondition of printf_va_7	Unknown	valid_read_string(param0)
-tests	test-reader.c	151	printf_va_7	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	177	check_boms	mem_access	Unknown	\valid_read(end)
 tests	test-reader.c	180	check_boms	differing_blocks	Unknown	\base_addr(end) ≡ \base_addr(start)
 tests	test-reader.c	183	check_boms	precondition of printf_va_12	Unknown	valid_read_string(param0)
-tests	test-reader.c	183	printf_va_12	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	184	check_boms	signed_overflow	Unknown	failed + 1 ≤ 2147483647
 tests	test-reader.c	189	check_boms	signed_overflow	Unknown	failed + 1 ≤ 2147483647
 tests	test-reader.c	191	check_boms	precondition of memcmp	Unknown	danglingness: s1: non_escaping(s1, n)
 tests	test-reader.c	191	check_boms	precondition of memcmp	Unknown	initialization: s1: \initialized((char *)s1 + (0 .. n - 1))
 tests	test-reader.c	191	check_boms	precondition of memcmp	Unknown	valid_s1: valid_read_or_empty(s1, n)
 tests	test-reader.c	192	check_boms	precondition of printf_va_14	Unknown	valid_read_string(param0)
-tests	test-reader.c	192	printf_va_14	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	193	check_boms	signed_overflow	Unknown	failed + 1 ≤ 2147483647
 tests	test-reader.c	215	check_long_utf8	precondition of __FC_assert	Unknown	nonnull_c: c ≢ 0
 tests	test-reader.c	222	check_long_utf8	signed_overflow	Unknown	k + 1 ≤ 2147483647
@@ -117,13 +121,11 @@ tests	test-reader.c	226	check_long_utf8	signed_overflow	Unknown	k + 1 ≤ 214748
 tests	test-reader.c	226	check_long_utf8	mem_access	Unknown	\valid(buffer + tmp_5)
 tests	test-reader.c	227	check_long_utf8	mem_access	Unknown	\valid(buffer + tmp_6)
 tests	test-reader.c	235	check_long_utf8	precondition of printf_va_18	Unknown	valid_read_string(param0)
-tests	test-reader.c	235	printf_va_18	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	253	check_long_utf8	initialization	Unknown	\initialized(parser.buffer.pointer + 0)
 tests	test-reader.c	253	check_long_utf8	mem_access	Unknown	\valid_read(parser.buffer.pointer + 0)
 tests	test-reader.c	253	check_long_utf8	initialization	Unknown	\initialized(parser.buffer.pointer + 1)
 tests	test-reader.c	254	check_long_utf8	initialization	Unknown	\initialized(parser.buffer.pointer + 1)
 tests	test-reader.c	265	check_long_utf8	precondition of printf_va_22	Unknown	valid_read_string(param0)
-tests	test-reader.c	265	printf_va_22	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	268	check_long_utf8	initialization	Unknown	\initialized(parser.buffer.pointer + 0)
 tests	test-reader.c	268	check_long_utf8	mem_access	Unknown	\valid_read(parser.buffer.pointer + 0)
 tests	test-reader.c	287	check_long_utf16	precondition of __FC_assert	Unknown	nonnull_c: c ≢ 0
@@ -134,13 +136,11 @@ tests	test-reader.c	297	check_long_utf16	mem_access	Unknown	\valid(buffer + tmp_
 tests	test-reader.c	298	check_long_utf16	signed_overflow	Unknown	k + 1 ≤ 2147483647
 tests	test-reader.c	298	check_long_utf16	mem_access	Unknown	\valid(buffer + tmp_5)
 tests	test-reader.c	306	check_long_utf16	precondition of printf_va_25	Unknown	valid_read_string(param0)
-tests	test-reader.c	306	printf_va_25	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	324	check_long_utf16	initialization	Unknown	\initialized(parser.buffer.pointer + 0)
 tests	test-reader.c	324	check_long_utf16	mem_access	Unknown	\valid_read(parser.buffer.pointer + 0)
 tests	test-reader.c	324	check_long_utf16	initialization	Unknown	\initialized(parser.buffer.pointer + 1)
 tests	test-reader.c	325	check_long_utf16	initialization	Unknown	\initialized(parser.buffer.pointer + 1)
 tests	test-reader.c	336	check_long_utf16	precondition of printf_va_29	Unknown	valid_read_string(param0)
-tests	test-reader.c	336	printf_va_29	precondition	Unknown	valid_read_string(param0)
 tests	test-reader.c	339	check_long_utf16	initialization	Unknown	\initialized(parser.buffer.pointer + 0)
 tests	test-reader.c	339	check_long_utf16	mem_access	Unknown	\valid_read(parser.buffer.pointer + 0)
 tests	test-reader.c	353	main	signed_overflow	Unknown	(int)((int)(tmp + tmp_0) + tmp_1) + tmp_2 ≤ 2147483647
diff --git a/libyaml/.frama-c/test-reader.parse/framac.ast b/libyaml/.frama-c/test-reader.parse/framac.ast
index f74e7af47132221c5e010dab77f0a703eb99fe07..3da7ae2c0d206b8d10031f0704d9e5a7d9e7a641 100644
--- a/libyaml/.frama-c/test-reader.parse/framac.ast
+++ b/libyaml/.frama-c/test-reader.parse/framac.ast
@@ -22727,8 +22727,8 @@ char *bom_original =
  */
 int printf_va_1(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22777,8 +22777,8 @@ int printf_va_4(char const * restrict format);
  */
 int printf_va_5(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22793,8 +22793,8 @@ int printf_va_5(char const * restrict format);
 int printf_va_6(char const * restrict format, char *param0,
                 unsigned int param1, long param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22900,8 +22900,8 @@ int check_utf8_sequences(void)
  */
 int printf_va_10(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22914,8 +22914,8 @@ int printf_va_10(char const * restrict format);
  */
 int printf_va_11(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22943,9 +22943,9 @@ int printf_va_12(char const * restrict format, char *param0, long param1);
  */
 int printf_va_13(char const * restrict format, long param0, int param1);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23047,8 +23047,8 @@ int check_boms(void)
  */
 int printf_va_17(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23106,8 +23106,8 @@ int printf_va_20(char const * restrict format, unsigned int param0,
 int printf_va_21(char const * restrict format, unsigned int param0,
                  int param1, long param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23262,8 +23262,8 @@ int check_long_utf8(void)
  */
 int printf_va_24(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23321,8 +23321,8 @@ int printf_va_27(char const * restrict format, unsigned int param0,
 int printf_va_28(char const * restrict format, unsigned int param0,
                  int param1, long param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/microstrain/.frama-c/microstrain_gx4_45_test.eva/alarms.csv b/microstrain/.frama-c/microstrain_gx4_45_test.eva/alarms.csv
index 6b354ff84b7e4be1b8887f3cb78d8a59fec255e9..09f65d7d200dac208011e32527ea0c76af99631f 100644
--- a/microstrain/.frama-c/microstrain_gx4_45_test.eva/alarms.csv
+++ b/microstrain/.frama-c/microstrain_gx4_45_test.eva/alarms.csv
@@ -1,24 +1,31 @@
 directory	file	line	function	property kind	status	property
-FRAMAC_SHARE/libc	fcntl.h	154	__va_open_void	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	fcntl.h	157	__va_open_void	precondition	Unknown	valid_filename: valid_read_string(filename)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_154	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_155	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_156	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_157	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_158	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_2	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_25	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_252	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_26	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_27	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_28	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_29	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdlib.h	564	abs	precondition	Unknown	abs_representable: j > -2147483647 - 1
 FRAMAC_SHARE/libc	string.h	95	memcpy	precondition	Unknown	valid_dest: valid_or_empty(dest, n)
 FRAMAC_SHARE/libc	string.h	96	memcpy	precondition	Unknown	valid_src: valid_read_or_empty(src, n)
 FRAMAC_SHARE/libc	string.h	355	strcpy	precondition	Invalid or unreachable	room_string: \valid(dest + (0 .. strlen(src)))
 FRAMAC_SHARE/libc	string.h	413	strcat	precondition	Unknown	room_string: \valid(dest + (0 .. strlen(dest) + strlen(src)))
-FRAMAC_SHARE/libc	unistd.h	1006	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
-FRAMAC_SHARE/libc	unistd.h	1139	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1008	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1141	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	258	main	precondition of printf_va_25	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	258	printf_va_25	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	261	main	precondition of printf_va_26	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	261	printf_va_26	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	264	main	precondition of printf_va_27	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	264	printf_va_27	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	267	main	precondition of printf_va_28	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	267	printf_va_28	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	270	main	precondition of printf_va_29	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	270	printf_va_29	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	272	main	signed_overflow	Unknown	(int)device_info.firmware_version / 1000 ≤ 2147483647
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	272	main	signed_overflow	Unknown	-2147483648 ≤ (int)device_info.firmware_version / 1000
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	273	main	signed_overflow	Unknown	(int)((int)device_info.firmware_version % 1000) / 100 ≤ 2147483647
@@ -209,15 +216,10 @@ MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	570	main	is_nan_or_infi
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	570	main	is_nan_or_infinite	Unknown	\is_finite((double)soft_iron_readback[7])
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	570	main	is_nan_or_infinite	Unknown	\is_finite((double)soft_iron_readback[8])
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	696	main	precondition of printf_va_154	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	696	printf_va_154	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	699	main	precondition of printf_va_155	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	699	printf_va_155	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	702	main	precondition of printf_va_156	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	702	printf_va_156	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	705	main	precondition of printf_va_157	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	705	printf_va_157	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	708	main	precondition of printf_va_158	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	708	printf_va_158	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	710	main	signed_overflow	Unknown	(int)device_info.firmware_version / 1000 ≤ 2147483647
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	710	main	signed_overflow	Unknown	-2147483648 ≤ (int)device_info.firmware_version / 1000
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	711	main	signed_overflow	Unknown	(int)((int)device_info.firmware_version % 1000) / 100 ≤ 2147483647
@@ -411,7 +413,6 @@ MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1064	main	initializatio
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1066	main	initialization	Unknown	\initialized(&basic_field.system_state)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1068	main	precondition of strcpy	Invalid or unreachable	room_string: \valid(dest + (0 .. strlen(src)))
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1079	main	precondition of printf_va_252	Unknown	valid_read_string(param0)
-MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1079	printf_va_252	precondition	Unknown	valid_read_string(param0)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1080	main	initialization	Unknown	\initialized(&basic_field.system_timer_ms)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1087	main	initialization	Unknown	\initialized(&diagnostic_field.device_model)
 MIPSDK/C/Examples/Linux/GX4-45/GX4_45_Test	GX4-45_Test.c	1088	main	initialization	Unknown	\initialized(&diagnostic_field.status_selector)
@@ -729,7 +730,6 @@ MIPSDK/C/Utilities/Source	byteswap_utilities.c	109	byteswap_inplace	initializati
 src	mip_sdk_user_functions.c	76	mip_sdk_port_open	precondition of strcat	Unknown	room_string: \valid(dest + (0 .. strlen(dest) + strlen(src)))
 src	mip_sdk_user_functions.c	79	mip_sdk_port_open	precondition of __va_open_void	Unknown	valid_filename: valid_read_string(filename)
 src	mip_sdk_user_functions.c	84	mip_sdk_port_open	precondition of printf_va_2	Unknown	valid_read_string(param0)
-src	mip_sdk_user_functions.c	84	printf_va_2	precondition	Unknown	valid_read_string(param0)
 src	mip_sdk_user_functions.c	276	mip_sdk_port_open	initialization	Unknown	\initialized(&options.c_cflag)
 src	mip_sdk_user_functions.c	392	mip_sdk_port_write	mem_access	Unknown	\valid_read((int *)port_handle)
 src	mip_sdk_user_functions.c	395	mip_sdk_port_write	precondition of write	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
diff --git a/microstrain/.frama-c/microstrain_gx4_45_test.parse/framac.ast b/microstrain/.frama-c/microstrain_gx4_45_test.parse/framac.ast
index 3b21e6bbe87a8284fea8495c159202ae6dccbf98..f3d8b4b118ec09046388334e7d978b1bf85d8381 100644
--- a/microstrain/.frama-c/microstrain_gx4_45_test.parse/framac.ast
+++ b/microstrain/.frama-c/microstrain_gx4_45_test.parse/framac.ast
@@ -6204,8 +6204,8 @@ u16 purge(ComPortHandle comPortHandle)
 }
 
 static ComPortHandle mip_sdk_port_open_local_port_handle;
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -6723,8 +6723,8 @@ int printf_va_23(char const * restrict format);
  */
 int printf_va_24(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -6737,8 +6737,8 @@ int printf_va_24(char const * restrict format);
  */
 int printf_va_25(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -6751,8 +6751,8 @@ int printf_va_25(char const * restrict format, char *param0);
  */
 int printf_va_26(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -6765,8 +6765,8 @@ int printf_va_26(char const * restrict format, char *param0);
  */
 int printf_va_27(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -6779,8 +6779,8 @@ int printf_va_27(char const * restrict format, char *param0);
  */
 int printf_va_28(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7066,8 +7066,8 @@ int printf_va_50(char const * restrict format);
  */
 int printf_va_51(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7131,8 +7131,8 @@ int printf_va_55(char const * restrict format);
  */
 int printf_va_56(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7171,8 +7171,8 @@ int printf_va_58(char const * restrict format, unsigned int param0);
  */
 int printf_va_59(char const * restrict format, unsigned long long param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7185,8 +7185,8 @@ int printf_va_59(char const * restrict format, unsigned long long param0);
  */
 int printf_va_60(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7277,8 +7277,8 @@ int printf_va_66(char const * restrict format, double param0);
  */
 int printf_va_67(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7317,8 +7317,8 @@ int printf_va_69(char const * restrict format, unsigned int param0);
  */
 int printf_va_70(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7456,8 +7456,8 @@ int printf_va_80(char const * restrict format);
  */
 int printf_va_81(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -7494,8 +7494,8 @@ int printf_va_83(char const * restrict format);
  */
 int printf_va_84(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8359,8 +8359,8 @@ int printf_va_152(char const * restrict format);
  */
 int printf_va_153(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8373,8 +8373,8 @@ int printf_va_153(char const * restrict format);
  */
 int printf_va_154(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8387,8 +8387,8 @@ int printf_va_154(char const * restrict format, char *param0);
  */
 int printf_va_155(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8401,8 +8401,8 @@ int printf_va_155(char const * restrict format, char *param0);
  */
 int printf_va_156(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8415,8 +8415,8 @@ int printf_va_156(char const * restrict format, char *param0);
  */
 int printf_va_157(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8823,8 +8823,8 @@ int printf_va_189(char const * restrict format);
  */
 int printf_va_190(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -8861,8 +8861,8 @@ int printf_va_192(char const * restrict format);
  */
 int printf_va_193(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9577,8 +9577,8 @@ int printf_va_248(char const * restrict format);
  */
 int printf_va_249(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9604,8 +9604,8 @@ int printf_va_250(char const * restrict format, char *param0);
  */
 int printf_va_251(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9656,8 +9656,8 @@ int printf_va_254(char const * restrict format);
  */
 int printf_va_255(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9722,8 +9722,8 @@ int printf_va_259(char const * restrict format, unsigned int param0);
  */
 int printf_va_260(char const * restrict format, unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9736,8 +9736,8 @@ int printf_va_260(char const * restrict format, unsigned int param0);
  */
 int printf_va_261(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9750,8 +9750,8 @@ int printf_va_261(char const * restrict format, char *param0);
  */
 int printf_va_262(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/mini-gmp/.frama-c/mini-gmp.eva/alarms.csv b/mini-gmp/.frama-c/mini-gmp.eva/alarms.csv
index 129eb7ce1afe7011c79dd4a0212905bf5f233084..91746636b88eba1a45ca8a19e5a146752e2585ac 100644
--- a/mini-gmp/.frama-c/mini-gmp.eva/alarms.csv
+++ b/mini-gmp/.frama-c/mini-gmp.eva/alarms.csv
@@ -2,8 +2,8 @@ directory	file	line	function	property kind	status	property
 .	mini-gmp.c	255	gmp_default_alloc	precondition of __FC_assert	Unknown	nonnull_c: c ≢ 0
 .	mini-gmp.c	4109	mpz_set_str	mem_access	Unknown	\valid_read(sp)
 FRAMAC_SHARE/libc	assert.h	31	__FC_assert	precondition	Unknown	nonnull_c: c ≢ 0
+FRAMAC_SHARE/libc	stdio.h	207	fprintf_va_3	precondition	Unknown	valid_read_string(param0)
 FRAMAC_SHARE/libc	stdlib.h	405	free	precondition	Unknown	freeable: p ≡ \null ∨ \freeable(p)
-tests	mini-random.c	30	fprintf_va_3	precondition	Unknown	valid_read_string(param0)
 tests	mini-random.c	30	set_str	precondition of fprintf_va_3	Unknown	valid_read_string(param0)
 tests	mini-random.c	91	mini_random_op3	precondition of free	Unknown	freeable: p ≡ \null ∨ \freeable(p)
 tests	mini-random.c	92	mini_random_op3	precondition of free	Unknown	freeable: p ≡ \null ∨ \freeable(p)
diff --git a/mini-gmp/.frama-c/mini-gmp.parse/framac.ast b/mini-gmp/.frama-c/mini-gmp.parse/framac.ast
index 689fe8b613e57cec1578434685e39a261e202f6f..eb0dab232de68b04ffbbae62752ef98ebf151f33 100644
--- a/mini-gmp/.frama-c/mini-gmp.parse/framac.ast
+++ b/mini-gmp/.frama-c/mini-gmp.parse/framac.ast
@@ -539,8 +539,8 @@ void testmain(int argc, char **argv)
 }
 
 int const mp_bits_per_limb = (int)(sizeof(mp_limb_t) * (unsigned int)8);
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -6078,8 +6078,8 @@ void hex_random_str_op(unsigned long maxbits, int base, char **ap, char **rp)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/miniz/.frama-c/miniz-example1.parse/framac.ast b/miniz/.frama-c/miniz-example1.parse/framac.ast
index cc0d4a1a202bd96e94050f9abd063a64ff8721f0..b525fe42a01e46b00fd492ee0d91dd865973d810 100644
--- a/miniz/.frama-c/miniz-example1.parse/framac.ast
+++ b/miniz/.frama-c/miniz-example1.parse/framac.ast
@@ -430,8 +430,8 @@ tinfl_status __attribute__((__visibility__("default"))) tinfl_decompress
 
 static char const *s_pStr =
   "Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.Good morning Dr. Chandra. This is Hal. I am ready for my first lesson.";
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/miniz/.frama-c/miniz-example2.eva/alarms.csv b/miniz/.frama-c/miniz-example2.eva/alarms.csv
index 43f02e39385d6aacd48e6654aca1948b63491a96..03d33e33dd77d09bc2d32bf04284d8e254865e8d 100644
--- a/miniz/.frama-c/miniz-example2.eva/alarms.csv
+++ b/miniz/.frama-c/miniz-example2.eva/alarms.csv
@@ -2365,6 +2365,10 @@ FRAMAC_SHARE/libc	assert.h	31	__FC_assert	precondition	Unknown	nonnull_c: c ≢
 FRAMAC_SHARE/libc	stdio.h	120	fclose	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	128	fflush	precondition	Unknown	null_or_valid_stream: stream ≡ \null ∨ \valid_read(stream)
 FRAMAC_SHARE/libc	stdio.h	173	freopen	precondition	Unknown	valid_stream: \valid(stream)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_11	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_12	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_6	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_6	precondition	Unknown	valid_read_string(param1)
 FRAMAC_SHARE/libc	stdio.h	351	fread	precondition	Unknown	valid_ptr_block: \valid((char *)ptr + (0 .. nmemb * size - 1))
 FRAMAC_SHARE/libc	stdio.h	352	fread	precondition	Unknown	valid_stream: \valid(stream)
 FRAMAC_SHARE/libc	stdio.h	364	fwrite	precondition	Unknown	valid_ptr_block: \valid_read((char *)ptr + (0 .. nmemb * size - 1))
@@ -2390,8 +2394,6 @@ examples	example2.c	101	main	initialization	Unknown	\initialized(&file_stat.m_co
 examples	example2.c	101	main	initialization	Unknown	\initialized(&file_stat.m_uncomp_size)
 examples	example2.c	101	main	precondition of printf_va_6	Unknown	valid_read_string(param0)
 examples	example2.c	101	main	precondition of printf_va_6	Unknown	valid_read_string(param1)
-examples	example2.c	101	printf_va_6	precondition	Unknown	valid_read_string(param0)
-examples	example2.c	101	printf_va_6	precondition	Unknown	valid_read_string(param1)
 examples	example2.c	103	main	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
 examples	example2.c	143	main	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 examples	example2.c	143	main	precondition of memcmp	Unknown	danglingness: s1: non_escaping(s1, n)
@@ -2402,6 +2404,4 @@ examples	example2.c	143	main	precondition of memcmp	Unknown	valid_s1: valid_read
 examples	example2.c	143	main	precondition of memcmp	Unknown	valid_s2: valid_read_or_empty(s2, n)
 examples	example2.c	143	main	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 examples	example2.c	151	main	precondition of printf_va_11	Unknown	valid_read_string(param0)
-examples	example2.c	151	printf_va_11	precondition	Unknown	valid_read_string(param0)
 examples	example2.c	152	main	precondition of printf_va_12	Unknown	valid_read_string(param0)
-examples	example2.c	152	printf_va_12	precondition	Unknown	valid_read_string(param0)
diff --git a/miniz/.frama-c/miniz-example2.parse/framac.ast b/miniz/.frama-c/miniz-example2.parse/framac.ast
index fabd256d666a9fb864293f930f1e40678ca8a378..31945891443a343e701468ebf72ee2637c84ca88 100644
--- a/miniz/.frama-c/miniz-example2.parse/framac.ast
+++ b/miniz/.frama-c/miniz-example2.parse/framac.ast
@@ -921,8 +921,8 @@ static char const *s_pTest_str =
   "MISSION CONTROL I wouldn\'t worry too much about the computer. First of all, there is still a chance that he is right, despite your tests, andif it should happen again, we suggest eliminating this possibility by allowing the unit to remain in place and seeing whether or not itactually fails. If the computer should turn out to be wrong, the situation is still not alarming. The type of obsessional error he may beguilty of is not unknown among the latest generation of HAL 9000 computers. It has almost always revolved around a single detail, such asthe one you have described, and it has never interfered with the integrity or reliability of the computer\'s performance in other areas.No one is certain of the cause of this kind of malfunctioning. It may be over-programming, but it could also be any number of reasons. In anyevent, it is somewhat analogous to human neurotic behavior. Does this answer your query?  Zero-five-three-Zero, MC, transmission concluded.";
 static char const *s_pComment = "This is a comment";
 static char const *main_s_Test_archive_filename = "__mz_example2_test__.zip";
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -943,8 +943,8 @@ int printf_va_1(char const * restrict format, char *param0);
 int sprintf_va_1(char * restrict s, char const * restrict format,
                  unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: *(format + (0 ..))), (indirect: param2),
@@ -1004,9 +1004,9 @@ int printf_va_4(char const * restrict format);
  */
 int printf_va_5(char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1054,8 +1054,8 @@ int printf_va_8(char const * restrict format);
 int sprintf_va_3(char * restrict s, char const * restrict format,
                  unsigned int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: *(format + (0 ..))), (indirect: param2),
@@ -1091,8 +1091,8 @@ int printf_va_9(char const * restrict format);
  */
 int printf_va_10(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1107,8 +1107,8 @@ int printf_va_10(char const * restrict format);
 int printf_va_11(char const * restrict format, char *param0,
                  unsigned int param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/miniz/.frama-c/miniz-example3.parse/framac.ast b/miniz/.frama-c/miniz-example3.parse/framac.ast
index 2ec6ab003eb35e5807904b7d4b476a21438a2774..2064f1d72db9218d7681cac3c2148d45b24eb0f9 100644
--- a/miniz/.frama-c/miniz-example3.parse/framac.ast
+++ b/miniz/.frama-c/miniz-example3.parse/framac.ast
@@ -429,8 +429,8 @@ tinfl_status __attribute__((__visibility__("default"))) tinfl_decompress
 
 static uint8 s_inbuf[1024 * 1024];
 static uint8 s_outbuf[1024 * 1024];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -527,8 +527,8 @@ int printf_va_7(char const * restrict format);
  */
 int printf_va_8(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -577,9 +577,9 @@ int printf_va_11(char const * restrict format);
  */
 int printf_va_12(char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param2);
     requires valid_read_string(param3);
-    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/miniz/.frama-c/miniz-example5.parse/framac.ast b/miniz/.frama-c/miniz-example5.parse/framac.ast
index 0d7737fc26c514a0f1f65c3e36b7e83e171e082a..c26afa33adc247ce563f3d3fd6e7f8961d705649 100644
--- a/miniz/.frama-c/miniz-example5.parse/framac.ast
+++ b/miniz/.frama-c/miniz-example5.parse/framac.ast
@@ -479,8 +479,8 @@ int printf_va_8(char const * restrict format);
  */
 int printf_va_9(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -529,9 +529,9 @@ int printf_va_12(char const * restrict format);
  */
 int printf_va_13(char const * restrict format);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param2);
     requires valid_read_string(param3);
-    requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/miniz/.frama-c/miniz-example6.parse/framac.ast b/miniz/.frama-c/miniz-example6.parse/framac.ast
index 6e8efae585ba3f966a8fd0f37073d3bed72eb5b5..f68395002ff053e360ca669de8634d7db9cdf5c5 100644
--- a/miniz/.frama-c/miniz-example6.parse/framac.ast
+++ b/miniz/.frama-c/miniz-example6.parse/framac.ast
@@ -423,8 +423,8 @@ static char const *main_pFilename = "mandelbrot.png";
  */
 int fprintf_va_1(FILE * restrict stream, char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/monocypher/.frama-c/monocypher.parse/framac.ast b/monocypher/.frama-c/monocypher.parse/framac.ast
index c40bd89256a4b27c91b1e6ccaf14602b126f129e..1eaf5423e7108d36410f059fcac3c448494391a9 100644
--- a/monocypher/.frama-c/monocypher.parse/framac.ast
+++ b/monocypher/.frama-c/monocypher.parse/framac.ast
@@ -436073,9 +436073,9 @@ int zerocmp(u8 const *p, size_t n)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436330,8 +436330,8 @@ static void iterate_x25519(u8 k[32], u8 u[32])
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436344,8 +436344,8 @@ static void iterate_x25519(u8 k[32], u8 u[32])
  */
 int printf_va_7(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436450,8 +436450,8 @@ static int test_x25519(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436558,8 +436558,8 @@ static int p_verify64(void)
   return tmp;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436624,8 +436624,8 @@ static int p_chacha20(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436665,8 +436665,8 @@ static int p_chacha20_same_ptr(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436724,8 +436724,8 @@ static int p_chacha20_set_ctr(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436773,8 +436773,8 @@ static int p_poly1305(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436817,8 +436817,8 @@ static int p_poly1305_overlap(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436864,8 +436864,8 @@ static int p_blake2b(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436906,8 +436906,8 @@ static int p_blake2b_overlap(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436953,8 +436953,8 @@ static int p_sha512(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -436994,8 +436994,8 @@ static int p_sha512_overlap(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437038,8 +437038,8 @@ static int p_argon2i_easy(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437141,8 +437141,8 @@ static int p_argon2i_overlap(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437208,8 +437208,8 @@ static int p_eddsa_roundtrip(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437250,8 +437250,8 @@ static int p_eddsa_random(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437296,8 +437296,8 @@ static int p_eddsa_overlap(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437370,8 +437370,8 @@ static int p_eddsa_incremental(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437470,8 +437470,8 @@ static int p_aead(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437610,8 +437610,8 @@ static int p_lock_incremental(void)
   return status;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -437727,8 +437727,8 @@ int printf_va_30(char const * restrict format);
  */
 int printf_va_31(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/polarssl/.frama-c/polarssl-server.eva/alarms.csv b/polarssl/.frama-c/polarssl-server.eva/alarms.csv
index 069e42f64e621c52ae14dad4c6a22807af852584..77a1b60d1128cf0f85d259de250845424fa5520f 100644
--- a/polarssl/.frama-c/polarssl-server.eva/alarms.csv
+++ b/polarssl/.frama-c/polarssl-server.eva/alarms.csv
@@ -40,10 +40,10 @@ FRAMAC_SHARE/libc	string.h	96	memcpy	precondition	Unknown	valid_src: valid_read_
 FRAMAC_SHARE/libc	string.h	107	memmove	precondition	Unknown	valid_dest: valid_or_empty(dest, n)
 FRAMAC_SHARE/libc	string.h	108	memmove	precondition	Unknown	valid_src: valid_read_or_empty(src, n)
 FRAMAC_SHARE/libc	string.h	118	memset	precondition	Unknown	valid_s: valid_or_empty(s, n)
-FRAMAC_SHARE/libc	unistd.h	1006	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
-FRAMAC_SHARE/libc	unistd.h	1139	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
-FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1007	read	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1008	read	precondition	Unknown	buf_has_room: \valid((char *)buf + (0 .. count - 1))
+FRAMAC_SHARE/libc	unistd.h	1140	write	precondition	Unknown	valid_fd: 0 ≤ fd < 1024
+FRAMAC_SHARE/libc	unistd.h	1141	write	precondition	Unknown	buf_has_room: \valid_read((char *)buf + (0 .. count - 1))
 FRAMAC_SHARE/libc/sys	socket.h	301	accept	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 FRAMAC_SHARE/libc/sys	socket.h	536	shutdown	precondition	Unknown	valid_sockfd: 0 ≤ sockfd < 1024
 library	ctr_drbg.c	154	block_cipher_df	mem_access	Unknown	\valid_read(p + i)
diff --git a/polarssl/.frama-c/polarssl-server.parse/framac.ast b/polarssl/.frama-c/polarssl-server.parse/framac.ast
index d3d95c0a1cfadf756af2842078a667da9b8b2d3c..498fea2dc6f7118b02e867af6688452a26750b29 100644
--- a/polarssl/.frama-c/polarssl-server.parse/framac.ast
+++ b/polarssl/.frama-c/polarssl-server.parse/framac.ast
@@ -2712,8 +2712,8 @@ static unsigned char const aes_test_ctr_ct[3][48] =
     (unsigned char)0x07,
     (unsigned char)0x2F}};
 static int const aes_test_ctr_len[3] = {16, 32, 36};
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2775,8 +2775,8 @@ int printf_va_4(char const * restrict format);
  */
 int printf_va_5(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2838,8 +2838,8 @@ int printf_va_9(char const * restrict format);
  */
 int printf_va_10(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2901,8 +2901,8 @@ int printf_va_14(char const * restrict format);
  */
 int printf_va_15(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -4773,9 +4773,9 @@ int mpi_read_file(mpi *X, int radix, FILE *fin)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9756,8 +9756,8 @@ static unsigned char const camellia_test_ctr_ct[3][48] =
     (unsigned char)0x86,
     (unsigned char)0x96}};
 static int const camellia_test_ctr_len[3] = {16, 32, 36};
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9807,8 +9807,8 @@ int printf_va_50(char const * restrict format);
  */
 int printf_va_51(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -9858,8 +9858,8 @@ int printf_va_54(char const * restrict format);
  */
 int printf_va_55(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21565,12 +21565,12 @@ char *debug_fmt(char const *format, void * const *__va_params)
   return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param2);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21596,12 +21596,12 @@ void debug_print_msg(ssl_context const *ssl, int level, char const *file,
   return_label: return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param2);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21629,12 +21629,12 @@ void debug_print_ret(ssl_context const *ssl, int level, char const *file,
   return_label: return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param2);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21647,11 +21647,11 @@ void debug_print_ret(ssl_context const *ssl, int level, char const *file,
 int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
                   char *param0, int param1, char *param2, int param3);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21664,10 +21664,10 @@ int snprintf_va_3(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_4(char * restrict s, size_t n, char const * restrict format,
                   char *param0, int param1, unsigned int param2);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -21707,12 +21707,12 @@ void debug_print_buf(ssl_context const *ssl, int level, char const *file,
   return_label: return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param2);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21726,11 +21726,11 @@ int snprintf_va_6(char * restrict s, size_t n, char const * restrict format,
                   char *param0, int param1, char *param2,
                   unsigned long param3);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21742,10 +21742,10 @@ int snprintf_va_6(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
                   char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -21755,11 +21755,11 @@ int snprintf_va_7(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_8(char * restrict s, size_t n, char const * restrict format,
                   unsigned int param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21839,11 +21839,11 @@ void debug_print_mpi(ssl_context const *ssl, int level, char const *file,
   return_label: return;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -21855,13 +21855,13 @@ void debug_print_mpi(ssl_context const *ssl, int level, char const *file,
 int snprintf_va_10(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(param2);
+    requires valid_read_string(param4);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param4);
-    requires valid_read_string(param2);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -23503,8 +23503,8 @@ static unsigned char const des3_test_cbc_enc[3][8] =
     (unsigned char)0xED,
     (unsigned char)0x84,
     (unsigned char)0x39}};
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23555,8 +23555,8 @@ int printf_va_77(char const * restrict format);
  */
 int printf_va_78(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param2);
+/*@ requires valid_read_string(param2);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27053,16 +27053,16 @@ int net_connect(int *fd, char const *host, int port)
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
     assigns \result, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -39577,20 +39577,20 @@ static int x509_get_name(unsigned char **p, unsigned char const *end,
   return_label: return __retres;
 }
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param5);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param5);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires \valid(param5);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
+    ensures \initialized(param5);
     assigns \result, *param5, *param4, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -39611,20 +39611,20 @@ int sscanf_va_2(char const * restrict s, char const * restrict format,
                 int *param0, int *param1, int *param2, int *param3,
                 int *param4, int *param5);
 
-/*@ requires valid_read_string(s);
-    requires valid_read_string(format);
-    requires \valid(param5);
-    requires \valid(param4);
-    requires \valid(param3);
-    requires \valid(param2);
+/*@ requires \valid(param0);
     requires \valid(param1);
-    requires \valid(param0);
-    ensures \initialized(param5);
-    ensures \initialized(param4);
-    ensures \initialized(param3);
-    ensures \initialized(param2);
-    ensures \initialized(param1);
+    requires \valid(param2);
+    requires \valid(param3);
+    requires \valid(param4);
+    requires \valid(param5);
+    requires valid_read_string(format);
+    requires valid_read_string(s);
     ensures \initialized(param0);
+    ensures \initialized(param1);
+    ensures \initialized(param2);
+    ensures \initialized(param3);
+    ensures \initialized(param4);
+    ensures \initialized(param5);
     assigns \result, *param5, *param4, *param3, *param2, *param1, *param0;
     assigns \result
       \from (indirect: *(s + (0 ..))), (indirect: *(format + (0 ..)));
@@ -41354,10 +41354,10 @@ int x509parse_dhmfile(dhm_context *dhm, char const *path)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41365,10 +41365,10 @@ int x509parse_dhmfile(dhm_context *dhm, char const *path)
  */
 int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41376,10 +41376,10 @@ int snprintf_va_12(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_13(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41387,10 +41387,10 @@ int snprintf_va_13(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_14(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41398,10 +41398,10 @@ int snprintf_va_14(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_15(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41409,10 +41409,10 @@ int snprintf_va_15(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_16(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41420,10 +41420,10 @@ int snprintf_va_16(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_17(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41431,10 +41431,10 @@ int snprintf_va_17(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_18(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -41444,10 +41444,10 @@ int snprintf_va_18(char * restrict s, size_t n, char const * restrict format);
 int snprintf_va_19(char * restrict s, size_t n, char const * restrict format,
                    unsigned int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41455,10 +41455,10 @@ int snprintf_va_19(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_20(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -41468,10 +41468,10 @@ int snprintf_va_20(char * restrict s, size_t n, char const * restrict format);
 int snprintf_va_21(char * restrict s, size_t n, char const * restrict format,
                    unsigned int param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41479,11 +41479,11 @@ int snprintf_va_21(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_22(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41639,11 +41639,11 @@ int x509parse_dn_gets(char *buf, size_t size, x509_name const *dn)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param1);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41655,10 +41655,10 @@ int x509parse_dn_gets(char *buf, size_t size, x509_name const *dn)
 int snprintf_va_24(char * restrict s, size_t n, char const * restrict format,
                    unsigned int param0, char *param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41723,11 +41723,11 @@ int x509parse_serial_gets(char *buf, size_t size, x509_buf const *serial)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41739,11 +41739,11 @@ int x509parse_serial_gets(char *buf, size_t size, x509_buf const *serial)
 int snprintf_va_26(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41754,11 +41754,11 @@ int snprintf_va_26(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_27(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41769,11 +41769,11 @@ int snprintf_va_27(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_28(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41784,11 +41784,11 @@ int snprintf_va_28(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_29(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41803,11 +41803,11 @@ int snprintf_va_30(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1, int param2, int param3,
                    int param4, int param5, int param6);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41822,11 +41822,11 @@ int snprintf_va_31(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1, int param2, int param3,
                    int param4, int param5, int param6);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -41837,10 +41837,10 @@ int snprintf_va_31(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_32(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41848,10 +41848,10 @@ int snprintf_va_32(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_33(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41859,10 +41859,10 @@ int snprintf_va_33(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_34(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41870,10 +41870,10 @@ int snprintf_va_34(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_35(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41881,10 +41881,10 @@ int snprintf_va_35(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_36(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41892,10 +41892,10 @@ int snprintf_va_36(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_37(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41903,10 +41903,10 @@ int snprintf_va_37(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_38(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41914,10 +41914,10 @@ int snprintf_va_38(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_39(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41925,10 +41925,10 @@ int snprintf_va_39(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_40(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -41936,11 +41936,11 @@ int snprintf_va_40(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_41(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42221,10 +42221,10 @@ char const *x509_oid_get_description(x509_buf *oid)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42235,10 +42235,10 @@ char const *x509_oid_get_description(x509_buf *oid)
 int snprintf_va_43(char * restrict s, size_t n, char const * restrict format,
                    int param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))), (indirect: param0);
@@ -42299,11 +42299,11 @@ int x509_oid_get_numeric_string(char *buf, size_t size, x509_buf *oid)
   return_label: return __retres;
 }
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42315,11 +42315,11 @@ int x509_oid_get_numeric_string(char *buf, size_t size, x509_buf *oid)
 int snprintf_va_45(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42330,11 +42330,11 @@ int snprintf_va_45(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_46(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42349,11 +42349,11 @@ int snprintf_va_47(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1, int param2, int param3,
                    int param4, int param5, int param6);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42368,11 +42368,11 @@ int snprintf_va_48(char * restrict s, size_t n, char const * restrict format,
                    char *param0, int param1, int param2, int param3,
                    int param4, int param5, int param6);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42383,11 +42383,11 @@ int snprintf_va_48(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_49(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42398,10 +42398,10 @@ int snprintf_va_49(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_50(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42415,11 +42415,11 @@ int snprintf_va_51(char * restrict s, size_t n, char const * restrict format,
                    int param0, int param1, int param2, int param3,
                    int param4, int param5);
 
-/*@ requires
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
-    requires valid_read_string(param0);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: n), (indirect: *(format + (0 ..))),
@@ -42430,10 +42430,10 @@ int snprintf_va_51(char * restrict s, size_t n, char const * restrict format,
 int snprintf_va_52(char * restrict s, size_t n, char const * restrict format,
                    char *param0);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42441,10 +42441,10 @@ int snprintf_va_52(char * restrict s, size_t n, char const * restrict format,
  */
 int snprintf_va_53(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42452,10 +42452,10 @@ int snprintf_va_53(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_54(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42463,10 +42463,10 @@ int snprintf_va_54(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_55(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42474,10 +42474,10 @@ int snprintf_va_55(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_56(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42485,10 +42485,10 @@ int snprintf_va_56(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_57(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42496,10 +42496,10 @@ int snprintf_va_57(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_58(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42507,10 +42507,10 @@ int snprintf_va_58(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_59(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42518,10 +42518,10 @@ int snprintf_va_59(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_60(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -42529,10 +42529,10 @@ int snprintf_va_60(char * restrict s, size_t n, char const * restrict format);
  */
 int snprintf_va_61(char * restrict s, size_t n, char const * restrict format);
 
-/*@ requires
+/*@ requires valid_read_string(format);
+    requires
       \valid(s + (0 .. n - 1)) ∨
       \valid(s + (0 .. format_length(format) - 1));
-    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result \from (indirect: n), (indirect: *(format + (0 ..)));
     assigns *(s + (0 ..))
@@ -43745,8 +43745,8 @@ char *my_dhm_P =
 char *my_dhm_G = (char *)"4";
 int my_ciphersuites[13] =
   {0x39, 0x88, 0x33, 0x45, 0x16, 0x35, 0x84, 0x2F, 0x41, 0x0A, 0x05, 0x04, 0};
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
diff --git a/safestringlib/.frama-c/intelsafestringlib.eva/alarms.csv b/safestringlib/.frama-c/intelsafestringlib.eva/alarms.csv
index 84bcd88646b0d8e9d3f0e9884895134f47f9d993..3ba8b48594d554ce843fe6030168b9f03ccf1cf4 100644
--- a/safestringlib/.frama-c/intelsafestringlib.eva/alarms.csv
+++ b/safestringlib/.frama-c/intelsafestringlib.eva/alarms.csv
@@ -1,5 +1,69 @@
 directory	file	line	function	property kind	status	property
 FRAMAC_SHARE/libc	ctype.h	217	toupper	precondition	Unknown	c_uchar_of_eof: (0 ≤ c ≤ 255) ∨ c ≡ -1
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1003	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1003	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1006	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1006	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1010	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1010	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1013	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1019	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1022	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1025	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1115	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1119	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1119	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1129	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1133	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1133	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1140	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1140	precondition	Unknown	valid_read_wstring(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1143	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_1146	precondition	Unknown	valid_read_wstring(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_269	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_276	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_289	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_290	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_296	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_297	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_621	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_629	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_631	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_633	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_635	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_716	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_724	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_726	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_728	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_730	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_788	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_790	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_805	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_805	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_806	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_806	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_807	precondition	Unknown	valid_read_string(param0)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_807	precondition	Unknown	valid_read_string(param1)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_808	precondition	Invalid or unreachable	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_809	precondition	Invalid or unreachable	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_810	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_810	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_811	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_811	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_812	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_812	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_813	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_813	precondition	Unknown	valid_read_string(param3)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_818	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_820	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_822	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_824	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_826	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_833	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_835	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_837	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_839	precondition	Unknown	valid_read_string(param2)
+FRAMAC_SHARE/libc	stdio.h	211	printf_va_853	precondition	Unknown	valid_read_string(param2)
 FRAMAC_SHARE/libc	stdio.h	213	snprintf	assigns clause	Unknown	assigns \result, *(s + (0 ..));
 FRAMAC_SHARE/libc	stdio.h	213	snprintf	from clause	Unknown	assigns *(s + (0 ..)) \from *(s + (0 ..)), *(format + (0 ..)), n;
 FRAMAC_SHARE/libc	stdio.h	213	snprintf	from clause	Unknown	assigns \result \from *(s + (0 ..)), *(format + (0 ..)), n;
@@ -289,12 +353,10 @@ unittests	test_strcasestr_s.c	133	test_strcasestr_s	pointer_downcast	Unknown	(un
 unittests	test_strcasestr_s.c	159	test_strcasestr_s	precondition of strcasestr	Unknown	valid_string_haystack: valid_read_string(haystack)
 unittests	test_strcasestr_s.c	160	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)sub ≤ 2147483647
 unittests	test_strcasestr_s.c	160	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)std_sub ≤ 2147483647
-unittests	test_strcasestr_s.c	163	printf_va_269	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	163	test_strcasestr_s	precondition of printf_va_269	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	187	test_strcasestr_s	precondition of strcasestr	Unknown	valid_string_haystack: valid_read_string(haystack)
 unittests	test_strcasestr_s.c	188	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)sub ≤ 2147483647
 unittests	test_strcasestr_s.c	188	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)std_sub ≤ 2147483647
-unittests	test_strcasestr_s.c	191	printf_va_276	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	191	test_strcasestr_s	precondition of printf_va_276	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	253	test_strcasestr_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strcasestr_s.c	254	test_strcasestr_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
@@ -302,9 +364,7 @@ unittests	test_strcasestr_s.c	269	test_strcasestr_s	precondition of strcasestr	U
 unittests	test_strcasestr_s.c	269	test_strcasestr_s	precondition of strcasestr	Unknown	valid_string_needle: valid_read_string(needle)
 unittests	test_strcasestr_s.c	270	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)sub ≤ 2147483647
 unittests	test_strcasestr_s.c	270	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)std_sub ≤ 2147483647
-unittests	test_strcasestr_s.c	273	printf_va_289	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	273	test_strcasestr_s	precondition of printf_va_289	Unknown	valid_read_string(param0)
-unittests	test_strcasestr_s.c	274	printf_va_290	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	274	test_strcasestr_s	precondition of printf_va_290	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	284	test_strcasestr_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strcasestr_s.c	285	test_strcasestr_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
@@ -312,9 +372,7 @@ unittests	test_strcasestr_s.c	300	test_strcasestr_s	precondition of strcasestr	U
 unittests	test_strcasestr_s.c	300	test_strcasestr_s	precondition of strcasestr	Unknown	valid_string_needle: valid_read_string(needle)
 unittests	test_strcasestr_s.c	301	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)sub ≤ 2147483647
 unittests	test_strcasestr_s.c	301	test_strcasestr_s	pointer_downcast	Unknown	(unsigned int)std_sub ≤ 2147483647
-unittests	test_strcasestr_s.c	304	printf_va_296	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	304	test_strcasestr_s	precondition of printf_va_296	Unknown	valid_read_string(param0)
-unittests	test_strcasestr_s.c	305	printf_va_297	precondition	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	305	test_strcasestr_s	precondition of printf_va_297	Unknown	valid_read_string(param0)
 unittests	test_strcasestr_s.c	379	test_strcasestr_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strcasestr_s.c	425	test_strcasestr_s	precondition of strcasestr	Unknown	valid_string_haystack: valid_read_string(haystack)
@@ -404,19 +462,14 @@ unittests	test_strisuppercase_s.c	70	test_strisuppercase_s	precondition of strle
 unittests	test_strisuppercase_s.c	81	test_strisuppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strisuppercase_s.c	92	test_strisuppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strisuppercase_s.c	103	test_strisuppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strljustify_s.c	90	printf_va_621	precondition	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	90	test_strljustify_s	precondition of printf_va_621	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	161	test_strljustify_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strljustify_s.c	163	printf_va_629	precondition	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	163	test_strljustify_s	precondition of printf_va_629	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	179	test_strljustify_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strljustify_s.c	181	printf_va_631	precondition	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	181	test_strljustify_s	precondition of printf_va_631	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	197	test_strljustify_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strljustify_s.c	199	printf_va_633	precondition	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	199	test_strljustify_s	precondition of printf_va_633	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	215	test_strljustify_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strljustify_s.c	217	printf_va_635	precondition	Unknown	valid_read_string(param2)
 unittests	test_strljustify_s.c	217	test_strljustify_s	precondition of printf_va_635	Unknown	valid_read_string(param2)
 unittests	test_strncat_s.c	137	test_strncat_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
 unittests	test_strncat_s.c	156	test_strncat_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
@@ -435,155 +488,98 @@ unittests	test_strpbrk_s.c	256	test_strpbrk_s	ptr_comparison	Unknown	\pointer_co
 unittests	test_strpbrk_s.c	273	test_strpbrk_s	ptr_comparison	Unknown	\pointer_comparable((void *)first, (void *)std_first)
 unittests	test_strprefix_s.c	136	test_strprefix_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strprefix_s.c	149	test_strprefix_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strremovews_s.c	102	printf_va_716	precondition	Unknown	valid_read_string(param3)
 unittests	test_strremovews_s.c	102	test_strremovews_s	precondition of printf_va_716	Unknown	valid_read_string(param3)
 unittests	test_strremovews_s.c	170	test_strremovews_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strremovews_s.c	172	printf_va_724	precondition	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	172	test_strremovews_s	precondition of printf_va_724	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	188	test_strremovews_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strremovews_s.c	190	printf_va_726	precondition	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	190	test_strremovews_s	precondition of printf_va_726	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	206	test_strremovews_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strremovews_s.c	208	printf_va_728	precondition	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	208	test_strremovews_s	precondition of printf_va_728	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	224	test_strremovews_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strremovews_s.c	226	printf_va_730	precondition	Unknown	valid_read_string(param2)
 unittests	test_strremovews_s.c	226	test_strremovews_s	precondition of printf_va_730	Unknown	valid_read_string(param2)
-unittests	test_strstr_s.c	210	printf_va_788	precondition	Unknown	valid_read_string(param3)
 unittests	test_strstr_s.c	210	test_strstr_s	precondition of printf_va_788	Unknown	valid_read_string(param3)
-unittests	test_strstr_s.c	229	printf_va_790	precondition	Unknown	valid_read_string(param3)
 unittests	test_strstr_s.c	229	test_strstr_s	precondition of printf_va_790	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	78	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strtok_s.c	84	printf_va_805	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	84	printf_va_805	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	84	test_strtok_s	initialization	Unknown	\initialized(&p2str)
 unittests	test_strtok_s.c	84	test_strtok_s	precondition of printf_va_805	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	84	test_strtok_s	precondition of printf_va_805	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	92	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strtok_s.c	98	printf_va_806	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	98	printf_va_806	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	98	test_strtok_s	initialization	Unknown	\initialized(&p2str)
 unittests	test_strtok_s.c	98	test_strtok_s	precondition of printf_va_806	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	98	test_strtok_s	precondition of printf_va_806	Unknown	valid_read_string(param3)
-unittests	test_strtok_s.c	103	printf_va_807	precondition	Unknown	valid_read_string(param0)
-unittests	test_strtok_s.c	103	printf_va_807	precondition	Unknown	valid_read_string(param1)
 unittests	test_strtok_s.c	103	test_strtok_s	precondition of printf_va_807	Unknown	valid_read_string(param0)
 unittests	test_strtok_s.c	103	test_strtok_s	precondition of printf_va_807	Unknown	valid_read_string(param1)
 unittests	test_strtok_s.c	110	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strtok_s.c	116	printf_va_808	precondition	Invalid or unreachable	valid_read_string(param2)
-unittests	test_strtok_s.c	116	printf_va_808	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	116	test_strtok_s	initialization	Unknown	\initialized(&p2str)
 unittests	test_strtok_s.c	116	test_strtok_s	precondition of printf_va_808	Invalid or unreachable	valid_read_string(param2)
-unittests	test_strtok_s.c	116	test_strtok_s	precondition of printf_va_808	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	125	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
-unittests	test_strtok_s.c	131	printf_va_809	precondition	Invalid or unreachable	valid_read_string(param2)
-unittests	test_strtok_s.c	131	printf_va_809	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	131	test_strtok_s	initialization	Unknown	\initialized(&p2str)
 unittests	test_strtok_s.c	131	test_strtok_s	precondition of printf_va_809	Invalid or unreachable	valid_read_string(param2)
-unittests	test_strtok_s.c	131	test_strtok_s	precondition of printf_va_809	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	135	test_strtok_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtok_s.c	136	printf_va_810	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	136	printf_va_810	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	136	test_strtok_s	initialization	Unknown	\initialized(&p2str)
 unittests	test_strtok_s.c	136	test_strtok_s	precondition of printf_va_810	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	136	test_strtok_s	precondition of printf_va_810	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	145	test_strtok_s	initialization	Unknown	\initialized(&p2str)
-unittests	test_strtok_s.c	147	printf_va_811	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	147	printf_va_811	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	147	test_strtok_s	precondition of printf_va_811	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	147	test_strtok_s	precondition of printf_va_811	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	159	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtok_s.c	165	test_strtok_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtok_s.c	166	printf_va_812	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	166	printf_va_812	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	166	test_strtok_s	precondition of printf_va_812	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	166	test_strtok_s	precondition of printf_va_812	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	175	test_strtok_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtok_s.c	182	test_strtok_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtok_s.c	183	printf_va_813	precondition	Unknown	valid_read_string(param2)
-unittests	test_strtok_s.c	183	printf_va_813	precondition	Unknown	valid_read_string(param3)
 unittests	test_strtok_s.c	183	test_strtok_s	precondition of printf_va_813	Unknown	valid_read_string(param2)
 unittests	test_strtok_s.c	183	test_strtok_s	precondition of printf_va_813	Unknown	valid_read_string(param3)
 unittests	test_strtolowercase_s.c	50	test_strtolowercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtolowercase_s.c	58	test_strtolowercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtolowercase_s.c	59	printf_va_818	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	59	test_strtolowercase_s	precondition of printf_va_818	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	66	test_strtolowercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtolowercase_s.c	74	test_strtolowercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtolowercase_s.c	75	printf_va_820	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	75	test_strtolowercase_s	precondition of printf_va_820	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	89	test_strtolowercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtolowercase_s.c	90	printf_va_822	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	90	test_strtolowercase_s	precondition of printf_va_822	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	97	test_strtolowercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtolowercase_s.c	105	test_strtolowercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtolowercase_s.c	106	printf_va_824	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	106	test_strtolowercase_s	precondition of printf_va_824	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	113	test_strtolowercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtolowercase_s.c	121	test_strtolowercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtolowercase_s.c	122	printf_va_826	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	122	test_strtolowercase_s	precondition of printf_va_826	Unknown	valid_read_string(param2)
 unittests	test_strtolowercase_s.c	129	test_strtolowercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtouppercase_s.c	66	test_strtouppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtouppercase_s.c	76	test_strtouppercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtouppercase_s.c	77	printf_va_833	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	77	test_strtouppercase_s	precondition of printf_va_833	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	84	test_strtouppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtouppercase_s.c	94	test_strtouppercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtouppercase_s.c	95	printf_va_835	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	95	test_strtouppercase_s	precondition of printf_va_835	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	102	test_strtouppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtouppercase_s.c	112	test_strtouppercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtouppercase_s.c	113	printf_va_837	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	113	test_strtouppercase_s	precondition of printf_va_837	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	120	test_strtouppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strtouppercase_s.c	130	test_strtouppercase_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strtouppercase_s.c	131	printf_va_839	precondition	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	131	test_strtouppercase_s	precondition of printf_va_839	Unknown	valid_read_string(param2)
 unittests	test_strtouppercase_s.c	138	test_strtouppercase_s	precondition of strlen	Unknown	valid_string_s: valid_read_string(s)
 unittests	test_strzero_s.c	104	test_strzero_s	initialization	Unknown	\initialized(&str1_17[i])
 unittests	test_strzero_s.c	121	test_strzero_s	precondition of strcmp	Unknown	valid_string_s1: valid_read_string(s1)
-unittests	test_strzero_s.c	122	printf_va_853	precondition	Unknown	valid_read_string(param2)
 unittests	test_strzero_s.c	122	test_strzero_s	precondition of printf_va_853	Unknown	valid_read_string(param2)
-unittests	test_wcscpy_s.c	284	printf_va_1003	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	284	printf_va_1003	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcscpy_s.c	284	test_wcscpy_s	precondition of printf_va_1003	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	284	test_wcscpy_s	precondition of printf_va_1003	Unknown	valid_read_wstring(param3)
-unittests	test_wcscpy_s.c	305	printf_va_1006	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	305	printf_va_1006	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcscpy_s.c	305	test_wcscpy_s	precondition of printf_va_1006	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	305	test_wcscpy_s	precondition of printf_va_1006	Unknown	valid_read_wstring(param3)
-unittests	test_wcscpy_s.c	330	printf_va_1010	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	330	printf_va_1010	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcscpy_s.c	330	test_wcscpy_s	precondition of printf_va_1010	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	330	test_wcscpy_s	precondition of printf_va_1010	Unknown	valid_read_wstring(param3)
-unittests	test_wcscpy_s.c	350	printf_va_1013	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	350	test_wcscpy_s	precondition of printf_va_1013	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	388	printf_va_1019	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	388	test_wcscpy_s	precondition of printf_va_1019	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	409	printf_va_1022	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	409	test_wcscpy_s	precondition of printf_va_1022	Unknown	valid_read_wstring(param2)
-unittests	test_wcscpy_s.c	430	printf_va_1025	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcscpy_s.c	430	test_wcscpy_s	precondition of printf_va_1025	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	270	printf_va_1115	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcsncpy_s.c	270	test_wcsncpy_s	precondition of printf_va_1115	Unknown	valid_read_wstring(param3)
-unittests	test_wcsncpy_s.c	296	printf_va_1119	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	296	printf_va_1119	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcsncpy_s.c	296	test_wcsncpy_s	precondition of printf_va_1119	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	296	test_wcsncpy_s	precondition of printf_va_1119	Unknown	valid_read_wstring(param3)
-unittests	test_wcsncpy_s.c	374	printf_va_1129	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	374	test_wcsncpy_s	precondition of printf_va_1129	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	400	printf_va_1133	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	400	printf_va_1133	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcsncpy_s.c	400	test_wcsncpy_s	precondition of printf_va_1133	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	400	test_wcsncpy_s	precondition of printf_va_1133	Unknown	valid_read_wstring(param3)
-unittests	test_wcsncpy_s.c	454	printf_va_1140	precondition	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	454	printf_va_1140	precondition	Unknown	valid_read_wstring(param3)
 unittests	test_wcsncpy_s.c	454	test_wcsncpy_s	precondition of printf_va_1140	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	454	test_wcsncpy_s	precondition of printf_va_1140	Unknown	valid_read_wstring(param3)
-unittests	test_wcsncpy_s.c	476	printf_va_1143	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	476	test_wcsncpy_s	precondition of printf_va_1143	Unknown	valid_read_wstring(param2)
-unittests	test_wcsncpy_s.c	498	printf_va_1146	precondition	Unknown	valid_read_wstring(param2)
 unittests	test_wcsncpy_s.c	498	test_wcsncpy_s	precondition of printf_va_1146	Unknown	valid_read_wstring(param2)
 unittests	test_wmemcmp_s.c	224	test_wmemcmp_s	precondition of memcmp	Unknown	initialization: s1: \initialized((char *)s1 + (0 .. n - 1))
 unittests	test_wmemcmp_s.c	224	test_wmemcmp_s	precondition of memcmp	Unknown	initialization: s2: \initialized((char *)s2 + (0 .. n - 1))
diff --git a/safestringlib/.frama-c/intelsafestringlib.parse/framac.ast b/safestringlib/.frama-c/intelsafestringlib.parse/framac.ast
index 99975e10fd5567606e6b8fbea5dec9bdea097c25..72f230cfbf4b6f5e31e1f37a5bff00077283e47f 100644
--- a/safestringlib/.frama-c/intelsafestringlib.parse/framac.ast
+++ b/safestringlib/.frama-c/intelsafestringlib.parse/framac.ast
@@ -187,8 +187,8 @@ errno_t wcsncpy_s(wchar_t *dest_0, rsize_t dmax, wchar_t const *src,
 
 rsize_t wcsnlen_s(wchar_t const *dest_0, rsize_t dmax);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param1);
+/*@ requires valid_read_string(param1);
+    requires valid_read_string(format);
     assigns \result, stream->__fc_FILE_data;
     assigns \result
       \from (indirect: stream->__fc_FILE_id),
@@ -11183,8 +11183,8 @@ int printf_va_80(char const * restrict format);
  */
 int printf_va_81(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11199,8 +11199,8 @@ int printf_va_81(char const * restrict format, int param0);
 int printf_va_82(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11228,8 +11228,8 @@ int printf_va_83(char const * restrict format, char *param0,
  */
 int printf_va_84(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11244,8 +11244,8 @@ int printf_va_84(char const * restrict format, int param0);
 int printf_va_85(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11273,8 +11273,8 @@ int printf_va_86(char const * restrict format, char *param0,
  */
 int printf_va_87(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11289,8 +11289,8 @@ int printf_va_87(char const * restrict format, int param0);
 int printf_va_88(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11318,8 +11318,8 @@ int printf_va_89(char const * restrict format, char *param0,
  */
 int printf_va_90(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11334,8 +11334,8 @@ int printf_va_90(char const * restrict format, int param0);
 int printf_va_91(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11350,8 +11350,8 @@ int printf_va_91(char const * restrict format, char *param0,
 int printf_va_92(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11379,8 +11379,8 @@ int printf_va_93(char const * restrict format, char *param0,
  */
 int printf_va_94(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11395,8 +11395,8 @@ int printf_va_94(char const * restrict format, int param0);
 int printf_va_95(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11424,8 +11424,8 @@ int printf_va_96(char const * restrict format, char *param0,
  */
 int printf_va_97(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11440,8 +11440,8 @@ int printf_va_97(char const * restrict format, int param0);
 int printf_va_98(char const * restrict format, char *param0,
                  unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11469,8 +11469,8 @@ int printf_va_99(char const * restrict format, char *param0,
  */
 int printf_va_100(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11485,8 +11485,8 @@ int printf_va_100(char const * restrict format, int param0);
 int printf_va_101(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11501,8 +11501,8 @@ int printf_va_101(char const * restrict format, char *param0,
 int printf_va_102(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11530,8 +11530,8 @@ int printf_va_103(char const * restrict format, char *param0,
  */
 int printf_va_104(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11546,8 +11546,8 @@ int printf_va_104(char const * restrict format, int param0);
 int printf_va_105(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11562,8 +11562,8 @@ int printf_va_105(char const * restrict format, char *param0,
 int printf_va_106(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11591,8 +11591,8 @@ int printf_va_107(char const * restrict format, char *param0,
  */
 int printf_va_108(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11607,8 +11607,8 @@ int printf_va_108(char const * restrict format, int param0);
 int printf_va_109(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11623,8 +11623,8 @@ int printf_va_109(char const * restrict format, char *param0,
 int printf_va_110(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11652,8 +11652,8 @@ int printf_va_111(char const * restrict format, char *param0,
  */
 int printf_va_112(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11668,8 +11668,8 @@ int printf_va_112(char const * restrict format, int param0);
 int printf_va_113(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11684,9 +11684,9 @@ int printf_va_113(char const * restrict format, char *param0,
 int printf_va_114(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11715,8 +11715,8 @@ int printf_va_115(char const * restrict format, char *param0,
  */
 int printf_va_116(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11731,9 +11731,9 @@ int printf_va_116(char const * restrict format, int param0);
 int printf_va_117(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11749,8 +11749,8 @@ int printf_va_117(char const * restrict format, char *param0,
 int printf_va_118(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11778,8 +11778,8 @@ int printf_va_119(char const * restrict format, char *param0,
  */
 int printf_va_120(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11794,8 +11794,8 @@ int printf_va_120(char const * restrict format, int param0);
 int printf_va_121(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11810,9 +11810,9 @@ int printf_va_121(char const * restrict format, char *param0,
 int printf_va_122(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11841,8 +11841,8 @@ int printf_va_123(char const * restrict format, char *param0,
  */
 int printf_va_124(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11857,8 +11857,8 @@ int printf_va_124(char const * restrict format, int param0);
 int printf_va_125(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11873,9 +11873,9 @@ int printf_va_125(char const * restrict format, char *param0,
 int printf_va_126(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11904,8 +11904,8 @@ int printf_va_127(char const * restrict format, char *param0,
  */
 int printf_va_128(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11920,8 +11920,8 @@ int printf_va_128(char const * restrict format, int param0);
 int printf_va_129(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11936,9 +11936,9 @@ int printf_va_129(char const * restrict format, char *param0,
 int printf_va_130(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11967,8 +11967,8 @@ int printf_va_131(char const * restrict format, char *param0,
  */
 int printf_va_132(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -11983,9 +11983,9 @@ int printf_va_132(char const * restrict format, int param0);
 int printf_va_133(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12001,8 +12001,8 @@ int printf_va_133(char const * restrict format, char *param0,
 int printf_va_134(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12030,8 +12030,8 @@ int printf_va_135(char const * restrict format, char *param0,
  */
 int printf_va_136(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12046,8 +12046,8 @@ int printf_va_136(char const * restrict format, int param0);
 int printf_va_137(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12062,9 +12062,9 @@ int printf_va_137(char const * restrict format, char *param0,
 int printf_va_138(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12357,8 +12357,8 @@ int printf_va_140(char const * restrict format);
  */
 int printf_va_141(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12373,8 +12373,8 @@ int printf_va_141(char const * restrict format, int param0);
 int printf_va_142(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12402,8 +12402,8 @@ int printf_va_143(char const * restrict format, char *param0,
  */
 int printf_va_144(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12418,8 +12418,8 @@ int printf_va_144(char const * restrict format, int param0);
 int printf_va_145(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12447,8 +12447,8 @@ int printf_va_146(char const * restrict format, char *param0,
  */
 int printf_va_147(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12463,8 +12463,8 @@ int printf_va_147(char const * restrict format, int param0);
 int printf_va_148(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12492,8 +12492,8 @@ int printf_va_149(char const * restrict format, char *param0,
  */
 int printf_va_150(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12508,8 +12508,8 @@ int printf_va_150(char const * restrict format, int param0);
 int printf_va_151(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12524,8 +12524,8 @@ int printf_va_151(char const * restrict format, char *param0,
 int printf_va_152(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12553,8 +12553,8 @@ int printf_va_153(char const * restrict format, char *param0,
  */
 int printf_va_154(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12569,8 +12569,8 @@ int printf_va_154(char const * restrict format, int param0);
 int printf_va_155(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12598,8 +12598,8 @@ int printf_va_156(char const * restrict format, char *param0,
  */
 int printf_va_157(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12614,8 +12614,8 @@ int printf_va_157(char const * restrict format, int param0);
 int printf_va_158(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12643,8 +12643,8 @@ int printf_va_159(char const * restrict format, char *param0,
  */
 int printf_va_160(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12659,8 +12659,8 @@ int printf_va_160(char const * restrict format, int param0);
 int printf_va_161(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12675,8 +12675,8 @@ int printf_va_161(char const * restrict format, char *param0,
 int printf_va_162(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12704,8 +12704,8 @@ int printf_va_163(char const * restrict format, char *param0,
  */
 int printf_va_164(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12720,8 +12720,8 @@ int printf_va_164(char const * restrict format, int param0);
 int printf_va_165(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12736,8 +12736,8 @@ int printf_va_165(char const * restrict format, char *param0,
 int printf_va_166(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12765,8 +12765,8 @@ int printf_va_167(char const * restrict format, char *param0,
  */
 int printf_va_168(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12781,8 +12781,8 @@ int printf_va_168(char const * restrict format, int param0);
 int printf_va_169(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12797,8 +12797,8 @@ int printf_va_169(char const * restrict format, char *param0,
 int printf_va_170(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12826,8 +12826,8 @@ int printf_va_171(char const * restrict format, char *param0,
  */
 int printf_va_172(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12842,8 +12842,8 @@ int printf_va_172(char const * restrict format, int param0);
 int printf_va_173(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12858,9 +12858,9 @@ int printf_va_173(char const * restrict format, char *param0,
 int printf_va_174(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12889,8 +12889,8 @@ int printf_va_175(char const * restrict format, char *param0,
  */
 int printf_va_176(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12905,10 +12905,10 @@ int printf_va_176(char const * restrict format, int param0);
 int printf_va_177(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12927,8 +12927,8 @@ int printf_va_178(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3,
                   size_t param4, unsigned int param5);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12956,8 +12956,8 @@ int printf_va_179(char const * restrict format, char *param0,
  */
 int printf_va_180(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12972,8 +12972,8 @@ int printf_va_180(char const * restrict format, int param0);
 int printf_va_181(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -12988,10 +12988,10 @@ int printf_va_181(char const * restrict format, char *param0,
 int printf_va_182(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13010,8 +13010,8 @@ int printf_va_183(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3,
                   size_t param4, unsigned int param5);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13040,8 +13040,8 @@ int printf_va_184(char const * restrict format, char *param0,
  */
 int printf_va_185(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13056,8 +13056,8 @@ int printf_va_185(char const * restrict format, int param0);
 int printf_va_186(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13072,9 +13072,9 @@ int printf_va_186(char const * restrict format, char *param0,
 int printf_va_187(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13090,8 +13090,8 @@ int printf_va_187(char const * restrict format, char *param0,
 int printf_va_188(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13107,8 +13107,8 @@ int printf_va_188(char const * restrict format, char *param0,
 int printf_va_189(char const * restrict format, char *param0,
                   unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13137,8 +13137,8 @@ int printf_va_190(char const * restrict format, char *param0,
  */
 int printf_va_191(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13153,8 +13153,8 @@ int printf_va_191(char const * restrict format, int param0);
 int printf_va_192(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13169,9 +13169,9 @@ int printf_va_192(char const * restrict format, char *param0,
 int printf_va_193(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13187,8 +13187,8 @@ int printf_va_193(char const * restrict format, char *param0,
 int printf_va_194(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13217,8 +13217,8 @@ int printf_va_195(char const * restrict format, char *param0,
  */
 int printf_va_196(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13233,8 +13233,8 @@ int printf_va_196(char const * restrict format, int param0);
 int printf_va_197(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13249,9 +13249,9 @@ int printf_va_197(char const * restrict format, char *param0,
 int printf_va_198(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13267,8 +13267,8 @@ int printf_va_198(char const * restrict format, char *param0,
 int printf_va_199(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13297,8 +13297,8 @@ int printf_va_200(char const * restrict format, char *param0,
  */
 int printf_va_201(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13313,8 +13313,8 @@ int printf_va_201(char const * restrict format, int param0);
 int printf_va_202(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13329,9 +13329,9 @@ int printf_va_202(char const * restrict format, char *param0,
 int printf_va_203(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13360,8 +13360,8 @@ int printf_va_204(char const * restrict format, char *param0,
  */
 int printf_va_205(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13376,8 +13376,8 @@ int printf_va_205(char const * restrict format, int param0);
 int printf_va_206(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13392,9 +13392,9 @@ int printf_va_206(char const * restrict format, char *param0,
 int printf_va_207(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13423,8 +13423,8 @@ int printf_va_208(char const * restrict format, char *param0,
  */
 int printf_va_209(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13439,9 +13439,9 @@ int printf_va_209(char const * restrict format, int param0);
 int printf_va_210(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13457,8 +13457,8 @@ int printf_va_210(char const * restrict format, char *param0,
 int printf_va_211(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13486,8 +13486,8 @@ int printf_va_212(char const * restrict format, char *param0,
  */
 int printf_va_213(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13502,8 +13502,8 @@ int printf_va_213(char const * restrict format, int param0);
 int printf_va_214(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13518,9 +13518,9 @@ int printf_va_214(char const * restrict format, char *param0,
 int printf_va_215(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13942,8 +13942,8 @@ int test_stpncpy_s(void)
 
 static char str1_1[128];
 static char str2_1[128];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13958,8 +13958,8 @@ static char str2_1[128];
 int printf_va_217(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13975,8 +13975,8 @@ int printf_va_217(char const * restrict format, char *param0,
 int printf_va_218(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -13991,8 +13991,8 @@ int printf_va_218(char const * restrict format, char *param0,
 int printf_va_219(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14008,8 +14008,8 @@ int printf_va_219(char const * restrict format, char *param0,
 int printf_va_220(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14024,8 +14024,8 @@ int printf_va_220(char const * restrict format, char *param0,
 int printf_va_221(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14040,8 +14040,8 @@ int printf_va_221(char const * restrict format, char *param0,
 int printf_va_222(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14057,8 +14057,8 @@ int printf_va_222(char const * restrict format, char *param0,
 int printf_va_223(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14073,8 +14073,8 @@ int printf_va_223(char const * restrict format, char *param0,
 int printf_va_224(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14090,8 +14090,8 @@ int printf_va_224(char const * restrict format, char *param0,
 int printf_va_225(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14106,8 +14106,8 @@ int printf_va_225(char const * restrict format, char *param0,
 int printf_va_226(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14123,8 +14123,8 @@ int printf_va_226(char const * restrict format, char *param0,
 int printf_va_227(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14140,8 +14140,8 @@ int printf_va_227(char const * restrict format, char *param0,
 int printf_va_228(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14156,8 +14156,8 @@ int printf_va_228(char const * restrict format, char *param0,
 int printf_va_229(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14173,8 +14173,8 @@ int printf_va_229(char const * restrict format, char *param0,
 int printf_va_230(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14189,8 +14189,8 @@ int printf_va_230(char const * restrict format, char *param0,
 int printf_va_231(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14206,8 +14206,8 @@ int printf_va_231(char const * restrict format, char *param0,
 int printf_va_232(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14222,8 +14222,8 @@ int printf_va_232(char const * restrict format, char *param0,
 int printf_va_233(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14239,8 +14239,8 @@ int printf_va_233(char const * restrict format, char *param0,
 int printf_va_234(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14255,8 +14255,8 @@ int printf_va_234(char const * restrict format, char *param0,
 int printf_va_235(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14272,8 +14272,8 @@ int printf_va_235(char const * restrict format, char *param0,
 int printf_va_236(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14289,8 +14289,8 @@ int printf_va_236(char const * restrict format, char *param0,
 int printf_va_237(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14305,8 +14305,8 @@ int printf_va_237(char const * restrict format, char *param0,
 int printf_va_238(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14322,8 +14322,8 @@ int printf_va_238(char const * restrict format, char *param0,
 int printf_va_239(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14338,8 +14338,8 @@ int printf_va_239(char const * restrict format, char *param0,
 int printf_va_240(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14355,8 +14355,8 @@ int printf_va_240(char const * restrict format, char *param0,
 int printf_va_241(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14371,8 +14371,8 @@ int printf_va_241(char const * restrict format, char *param0,
 int printf_va_242(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14388,8 +14388,8 @@ int printf_va_242(char const * restrict format, char *param0,
 int printf_va_243(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14404,8 +14404,8 @@ int printf_va_243(char const * restrict format, char *param0,
 int printf_va_244(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14541,8 +14541,8 @@ int test_strcasecmp_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14557,8 +14557,8 @@ int test_strcasecmp_s(void)
 int printf_va_246(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14573,8 +14573,8 @@ int printf_va_246(char const * restrict format, char *param0,
 int printf_va_247(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14589,8 +14589,8 @@ int printf_va_247(char const * restrict format, char *param0,
 int printf_va_248(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14605,8 +14605,8 @@ int printf_va_248(char const * restrict format, char *param0,
 int printf_va_249(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14621,8 +14621,8 @@ int printf_va_249(char const * restrict format, char *param0,
 int printf_va_250(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14637,8 +14637,8 @@ int printf_va_250(char const * restrict format, char *param0,
 int printf_va_251(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14653,8 +14653,8 @@ int printf_va_251(char const * restrict format, char *param0,
 int printf_va_252(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14669,8 +14669,8 @@ int printf_va_252(char const * restrict format, char *param0,
 int printf_va_253(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14685,8 +14685,8 @@ int printf_va_253(char const * restrict format, char *param0,
 int printf_va_254(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14701,8 +14701,8 @@ int printf_va_254(char const * restrict format, char *param0,
 int printf_va_255(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14717,8 +14717,8 @@ int printf_va_255(char const * restrict format, char *param0,
 int printf_va_256(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14733,8 +14733,8 @@ int printf_va_256(char const * restrict format, char *param0,
 int printf_va_257(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14749,8 +14749,8 @@ int printf_va_257(char const * restrict format, char *param0,
 int printf_va_258(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14765,8 +14765,8 @@ int printf_va_258(char const * restrict format, char *param0,
 int printf_va_259(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14781,8 +14781,8 @@ int printf_va_259(char const * restrict format, char *param0,
 int printf_va_260(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14797,8 +14797,8 @@ int printf_va_260(char const * restrict format, char *param0,
 int printf_va_261(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14811,8 +14811,8 @@ int printf_va_261(char const * restrict format, char *param0,
  */
 int printf_va_262(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14851,8 +14851,8 @@ int printf_va_264(char const * restrict format, void *param0);
  */
 int printf_va_265(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14867,8 +14867,8 @@ int printf_va_265(char const * restrict format, void *param0);
 int printf_va_266(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14883,8 +14883,8 @@ int printf_va_266(char const * restrict format, char *param0,
 int printf_va_267(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14899,8 +14899,8 @@ int printf_va_267(char const * restrict format, char *param0,
 int printf_va_268(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14913,8 +14913,8 @@ int printf_va_268(char const * restrict format, char *param0,
  */
 int printf_va_269(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14953,8 +14953,8 @@ int printf_va_271(char const * restrict format, void *param0);
  */
 int printf_va_272(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14969,8 +14969,8 @@ int printf_va_272(char const * restrict format, void *param0);
 int printf_va_273(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -14985,8 +14985,8 @@ int printf_va_273(char const * restrict format, char *param0,
 int printf_va_274(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15001,8 +15001,8 @@ int printf_va_274(char const * restrict format, char *param0,
 int printf_va_275(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15015,8 +15015,8 @@ int printf_va_275(char const * restrict format, char *param0,
  */
 int printf_va_276(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15055,8 +15055,8 @@ int printf_va_278(char const * restrict format, void *param0);
  */
 int printf_va_279(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15071,8 +15071,8 @@ int printf_va_279(char const * restrict format, void *param0);
 int printf_va_280(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15087,8 +15087,8 @@ int printf_va_280(char const * restrict format, char *param0,
 int printf_va_281(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15103,8 +15103,8 @@ int printf_va_281(char const * restrict format, char *param0,
 int printf_va_282(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15119,8 +15119,8 @@ int printf_va_282(char const * restrict format, char *param0,
 int printf_va_283(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15135,8 +15135,8 @@ int printf_va_283(char const * restrict format, char *param0,
 int printf_va_284(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15151,8 +15151,8 @@ int printf_va_284(char const * restrict format, char *param0,
 int printf_va_285(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15167,8 +15167,8 @@ int printf_va_285(char const * restrict format, char *param0,
 int printf_va_286(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15183,8 +15183,8 @@ int printf_va_286(char const * restrict format, char *param0,
 int printf_va_287(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15199,8 +15199,8 @@ int printf_va_287(char const * restrict format, char *param0,
 int printf_va_288(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15213,8 +15213,8 @@ int printf_va_288(char const * restrict format, char *param0,
  */
 int printf_va_289(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15253,8 +15253,8 @@ int printf_va_291(char const * restrict format, void *param0);
  */
 int printf_va_292(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15269,8 +15269,8 @@ int printf_va_292(char const * restrict format, void *param0);
 int printf_va_293(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15285,8 +15285,8 @@ int printf_va_293(char const * restrict format, char *param0,
 int printf_va_294(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15301,8 +15301,8 @@ int printf_va_294(char const * restrict format, char *param0,
 int printf_va_295(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15315,8 +15315,8 @@ int printf_va_295(char const * restrict format, char *param0,
  */
 int printf_va_296(char const * restrict format, char *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15355,8 +15355,8 @@ int printf_va_298(char const * restrict format, void *param0);
  */
 int printf_va_299(char const * restrict format, void *param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15371,8 +15371,8 @@ int printf_va_299(char const * restrict format, void *param0);
 int printf_va_300(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15387,8 +15387,8 @@ int printf_va_300(char const * restrict format, char *param0,
 int printf_va_301(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15403,8 +15403,8 @@ int printf_va_301(char const * restrict format, char *param0,
 int printf_va_302(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15419,8 +15419,8 @@ int printf_va_302(char const * restrict format, char *param0,
 int printf_va_303(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15435,8 +15435,8 @@ int printf_va_303(char const * restrict format, char *param0,
 int printf_va_304(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15451,8 +15451,8 @@ int printf_va_304(char const * restrict format, char *param0,
 int printf_va_305(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15467,8 +15467,8 @@ int printf_va_305(char const * restrict format, char *param0,
 int printf_va_306(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15483,8 +15483,8 @@ int printf_va_306(char const * restrict format, char *param0,
 int printf_va_307(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15499,8 +15499,8 @@ int printf_va_307(char const * restrict format, char *param0,
 int printf_va_308(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15515,8 +15515,8 @@ int printf_va_308(char const * restrict format, char *param0,
 int printf_va_309(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15531,8 +15531,8 @@ int printf_va_309(char const * restrict format, char *param0,
 int printf_va_310(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15547,8 +15547,8 @@ int printf_va_310(char const * restrict format, char *param0,
 int printf_va_311(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15563,8 +15563,8 @@ int printf_va_311(char const * restrict format, char *param0,
 int printf_va_312(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15579,8 +15579,8 @@ int printf_va_312(char const * restrict format, char *param0,
 int printf_va_313(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15949,8 +15949,8 @@ int test_strcat_s(void)
 
 static char str1_3[128];
 static char str2_3[128];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15965,8 +15965,8 @@ static char str2_3[128];
 int printf_va_315(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15982,8 +15982,8 @@ int printf_va_315(char const * restrict format, char *param0,
 int printf_va_316(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -15998,8 +15998,8 @@ int printf_va_316(char const * restrict format, char *param0,
 int printf_va_317(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16015,8 +16015,8 @@ int printf_va_317(char const * restrict format, char *param0,
 int printf_va_318(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16031,8 +16031,8 @@ int printf_va_318(char const * restrict format, char *param0,
 int printf_va_319(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16047,8 +16047,8 @@ int printf_va_319(char const * restrict format, char *param0,
 int printf_va_320(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16064,8 +16064,8 @@ int printf_va_320(char const * restrict format, char *param0,
 int printf_va_321(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16080,8 +16080,8 @@ int printf_va_321(char const * restrict format, char *param0,
 int printf_va_322(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16097,8 +16097,8 @@ int printf_va_322(char const * restrict format, char *param0,
 int printf_va_323(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16113,8 +16113,8 @@ int printf_va_323(char const * restrict format, char *param0,
 int printf_va_324(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16130,8 +16130,8 @@ int printf_va_324(char const * restrict format, char *param0,
 int printf_va_325(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16147,8 +16147,8 @@ int printf_va_325(char const * restrict format, char *param0,
 int printf_va_326(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16163,8 +16163,8 @@ int printf_va_326(char const * restrict format, char *param0,
 int printf_va_327(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16180,8 +16180,8 @@ int printf_va_327(char const * restrict format, char *param0,
 int printf_va_328(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16196,8 +16196,8 @@ int printf_va_328(char const * restrict format, char *param0,
 int printf_va_329(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16213,8 +16213,8 @@ int printf_va_329(char const * restrict format, char *param0,
 int printf_va_330(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16230,8 +16230,8 @@ int printf_va_330(char const * restrict format, char *param0,
 int printf_va_331(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16246,8 +16246,8 @@ int printf_va_331(char const * restrict format, char *param0,
 int printf_va_332(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16263,8 +16263,8 @@ int printf_va_332(char const * restrict format, char *param0,
 int printf_va_333(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16280,8 +16280,8 @@ int printf_va_333(char const * restrict format, char *param0,
 int printf_va_334(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16296,8 +16296,8 @@ int printf_va_334(char const * restrict format, char *param0,
 int printf_va_335(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16313,8 +16313,8 @@ int printf_va_335(char const * restrict format, char *param0,
 int printf_va_336(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16330,8 +16330,8 @@ int printf_va_336(char const * restrict format, char *param0,
 int printf_va_337(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16346,8 +16346,8 @@ int printf_va_337(char const * restrict format, char *param0,
 int printf_va_338(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16363,8 +16363,8 @@ int printf_va_338(char const * restrict format, char *param0,
 int printf_va_339(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16380,8 +16380,8 @@ int printf_va_339(char const * restrict format, char *param0,
 int printf_va_340(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16396,8 +16396,8 @@ int printf_va_340(char const * restrict format, char *param0,
 int printf_va_341(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -16413,8 +16413,8 @@ int printf_va_341(char const * restrict format, char *param0,
 int printf_va_342(char const * restrict format, char *param0,
                   unsigned int param1, int param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17104,8 +17104,8 @@ static char str2_5[128];
  */
 int printf_va_344(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17120,8 +17120,8 @@ int printf_va_344(char const * restrict format, int param0);
 int printf_va_345(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17150,8 +17150,8 @@ int printf_va_346(char const * restrict format, char *param0,
  */
 int printf_va_347(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17166,8 +17166,8 @@ int printf_va_347(char const * restrict format, int param0);
 int printf_va_348(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17196,8 +17196,8 @@ int printf_va_349(char const * restrict format, char *param0,
  */
 int printf_va_350(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17225,8 +17225,8 @@ int printf_va_351(char const * restrict format, char *param0,
  */
 int printf_va_352(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17241,8 +17241,8 @@ int printf_va_352(char const * restrict format, int param0);
 int printf_va_353(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17271,8 +17271,8 @@ int printf_va_354(char const * restrict format, char *param0,
  */
 int printf_va_355(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17287,8 +17287,8 @@ int printf_va_355(char const * restrict format, int param0);
 int printf_va_356(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17317,8 +17317,8 @@ int printf_va_357(char const * restrict format, char *param0,
  */
 int printf_va_358(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17333,8 +17333,8 @@ int printf_va_358(char const * restrict format, int param0);
 int printf_va_359(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17363,8 +17363,8 @@ int printf_va_360(char const * restrict format, char *param0,
  */
 int printf_va_361(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17379,8 +17379,8 @@ int printf_va_361(char const * restrict format, int param0);
 int printf_va_362(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17409,8 +17409,8 @@ int printf_va_363(char const * restrict format, char *param0,
  */
 int printf_va_364(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17425,8 +17425,8 @@ int printf_va_364(char const * restrict format, int param0);
 int printf_va_365(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17442,8 +17442,8 @@ int printf_va_365(char const * restrict format, char *param0,
 int printf_va_366(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17472,8 +17472,8 @@ int printf_va_367(char const * restrict format, char *param0,
  */
 int printf_va_368(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17488,8 +17488,8 @@ int printf_va_368(char const * restrict format, int param0);
 int printf_va_369(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17518,8 +17518,8 @@ int printf_va_370(char const * restrict format, char *param0,
  */
 int printf_va_371(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17534,8 +17534,8 @@ int printf_va_371(char const * restrict format, int param0);
 int printf_va_372(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17564,8 +17564,8 @@ int printf_va_373(char const * restrict format, char *param0,
  */
 int printf_va_374(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17580,8 +17580,8 @@ int printf_va_374(char const * restrict format, int param0);
 int printf_va_375(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17610,8 +17610,8 @@ int printf_va_376(char const * restrict format, char *param0,
  */
 int printf_va_377(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17626,8 +17626,8 @@ int printf_va_377(char const * restrict format, int param0);
 int printf_va_378(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17656,8 +17656,8 @@ int printf_va_379(char const * restrict format, char *param0,
  */
 int printf_va_380(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17672,8 +17672,8 @@ int printf_va_380(char const * restrict format, int param0);
 int printf_va_381(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17702,8 +17702,8 @@ int printf_va_382(char const * restrict format, char *param0,
  */
 int printf_va_383(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17718,8 +17718,8 @@ int printf_va_383(char const * restrict format, int param0);
 int printf_va_384(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17748,8 +17748,8 @@ int printf_va_385(char const * restrict format, char *param0,
  */
 int printf_va_386(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17764,8 +17764,8 @@ int printf_va_386(char const * restrict format, int param0);
 int printf_va_387(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17794,8 +17794,8 @@ int printf_va_388(char const * restrict format, char *param0,
  */
 int printf_va_389(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -17810,8 +17810,8 @@ int printf_va_389(char const * restrict format, int param0);
 int printf_va_390(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18018,8 +18018,8 @@ int test_strcspn_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18035,8 +18035,8 @@ int test_strcspn_s(void)
 int printf_va_392(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18052,8 +18052,8 @@ int printf_va_392(char const * restrict format, char *param0,
 int printf_va_393(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18069,8 +18069,8 @@ int printf_va_393(char const * restrict format, char *param0,
 int printf_va_394(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18086,8 +18086,8 @@ int printf_va_394(char const * restrict format, char *param0,
 int printf_va_395(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18103,8 +18103,8 @@ int printf_va_395(char const * restrict format, char *param0,
 int printf_va_396(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18120,8 +18120,8 @@ int printf_va_396(char const * restrict format, char *param0,
 int printf_va_397(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18137,8 +18137,8 @@ int printf_va_397(char const * restrict format, char *param0,
 int printf_va_398(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18154,8 +18154,8 @@ int printf_va_398(char const * restrict format, char *param0,
 int printf_va_399(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18171,8 +18171,8 @@ int printf_va_399(char const * restrict format, char *param0,
 int printf_va_400(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18188,8 +18188,8 @@ int printf_va_400(char const * restrict format, char *param0,
 int printf_va_401(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18205,8 +18205,8 @@ int printf_va_401(char const * restrict format, char *param0,
 int printf_va_402(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18221,8 +18221,8 @@ int printf_va_402(char const * restrict format, char *param0,
 int printf_va_403(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18238,8 +18238,8 @@ int printf_va_403(char const * restrict format, char *param0,
 int printf_va_404(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18254,8 +18254,8 @@ int printf_va_404(char const * restrict format, char *param0,
 int printf_va_405(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18271,8 +18271,8 @@ int printf_va_405(char const * restrict format, char *param0,
 int printf_va_406(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18287,8 +18287,8 @@ int printf_va_406(char const * restrict format, char *param0,
 int printf_va_407(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18382,8 +18382,8 @@ int test_strfirstchar_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18398,8 +18398,8 @@ int test_strfirstchar_s(void)
 int printf_va_409(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18415,8 +18415,8 @@ int printf_va_409(char const * restrict format, char *param0,
 int printf_va_410(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18431,8 +18431,8 @@ int printf_va_410(char const * restrict format, char *param0,
 int printf_va_411(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18448,8 +18448,8 @@ int printf_va_411(char const * restrict format, char *param0,
 int printf_va_412(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18464,8 +18464,8 @@ int printf_va_412(char const * restrict format, char *param0,
 int printf_va_413(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18480,8 +18480,8 @@ int printf_va_413(char const * restrict format, char *param0,
 int printf_va_414(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18497,8 +18497,8 @@ int printf_va_414(char const * restrict format, char *param0,
 int printf_va_415(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18513,8 +18513,8 @@ int printf_va_415(char const * restrict format, char *param0,
 int printf_va_416(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18530,8 +18530,8 @@ int printf_va_416(char const * restrict format, char *param0,
 int printf_va_417(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18546,8 +18546,8 @@ int printf_va_417(char const * restrict format, char *param0,
 int printf_va_418(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18563,8 +18563,8 @@ int printf_va_418(char const * restrict format, char *param0,
 int printf_va_419(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18579,8 +18579,8 @@ int printf_va_419(char const * restrict format, char *param0,
 int printf_va_420(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18596,8 +18596,8 @@ int printf_va_420(char const * restrict format, char *param0,
 int printf_va_421(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18612,8 +18612,8 @@ int printf_va_421(char const * restrict format, char *param0,
 int printf_va_422(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18629,8 +18629,8 @@ int printf_va_422(char const * restrict format, char *param0,
 int printf_va_423(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18645,8 +18645,8 @@ int printf_va_423(char const * restrict format, char *param0,
 int printf_va_424(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18662,8 +18662,8 @@ int printf_va_424(char const * restrict format, char *param0,
 int printf_va_425(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18678,8 +18678,8 @@ int printf_va_425(char const * restrict format, char *param0,
 int printf_va_426(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18695,8 +18695,8 @@ int printf_va_426(char const * restrict format, char *param0,
 int printf_va_427(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18711,8 +18711,8 @@ int printf_va_427(char const * restrict format, char *param0,
 int printf_va_428(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18728,8 +18728,8 @@ int printf_va_428(char const * restrict format, char *param0,
 int printf_va_429(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18744,8 +18744,8 @@ int printf_va_429(char const * restrict format, char *param0,
 int printf_va_430(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18761,8 +18761,8 @@ int printf_va_430(char const * restrict format, char *param0,
 int printf_va_431(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18777,8 +18777,8 @@ int printf_va_431(char const * restrict format, char *param0,
 int printf_va_432(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18794,8 +18794,8 @@ int printf_va_432(char const * restrict format, char *param0,
 int printf_va_433(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18810,8 +18810,8 @@ int printf_va_433(char const * restrict format, char *param0,
 int printf_va_434(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18951,8 +18951,8 @@ int test_strfirstdiff_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18967,8 +18967,8 @@ int test_strfirstdiff_s(void)
 int printf_va_436(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -18984,8 +18984,8 @@ int printf_va_436(char const * restrict format, char *param0,
 int printf_va_437(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19000,8 +19000,8 @@ int printf_va_437(char const * restrict format, char *param0,
 int printf_va_438(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19017,8 +19017,8 @@ int printf_va_438(char const * restrict format, char *param0,
 int printf_va_439(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19033,8 +19033,8 @@ int printf_va_439(char const * restrict format, char *param0,
 int printf_va_440(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19049,8 +19049,8 @@ int printf_va_440(char const * restrict format, char *param0,
 int printf_va_441(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19066,8 +19066,8 @@ int printf_va_441(char const * restrict format, char *param0,
 int printf_va_442(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19082,8 +19082,8 @@ int printf_va_442(char const * restrict format, char *param0,
 int printf_va_443(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19099,8 +19099,8 @@ int printf_va_443(char const * restrict format, char *param0,
 int printf_va_444(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19115,8 +19115,8 @@ int printf_va_444(char const * restrict format, char *param0,
 int printf_va_445(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19132,8 +19132,8 @@ int printf_va_445(char const * restrict format, char *param0,
 int printf_va_446(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19148,8 +19148,8 @@ int printf_va_446(char const * restrict format, char *param0,
 int printf_va_447(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19165,8 +19165,8 @@ int printf_va_447(char const * restrict format, char *param0,
 int printf_va_448(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19181,8 +19181,8 @@ int printf_va_448(char const * restrict format, char *param0,
 int printf_va_449(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19198,8 +19198,8 @@ int printf_va_449(char const * restrict format, char *param0,
 int printf_va_450(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19214,8 +19214,8 @@ int printf_va_450(char const * restrict format, char *param0,
 int printf_va_451(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19231,8 +19231,8 @@ int printf_va_451(char const * restrict format, char *param0,
 int printf_va_452(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19247,8 +19247,8 @@ int printf_va_452(char const * restrict format, char *param0,
 int printf_va_453(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19264,8 +19264,8 @@ int printf_va_453(char const * restrict format, char *param0,
 int printf_va_454(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19280,8 +19280,8 @@ int printf_va_454(char const * restrict format, char *param0,
 int printf_va_455(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19297,8 +19297,8 @@ int printf_va_455(char const * restrict format, char *param0,
 int printf_va_456(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19314,8 +19314,8 @@ int printf_va_456(char const * restrict format, char *param0,
 int printf_va_457(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19331,8 +19331,8 @@ int printf_va_457(char const * restrict format, char *param0,
 int printf_va_458(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19348,8 +19348,8 @@ int printf_va_458(char const * restrict format, char *param0,
 int printf_va_459(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19365,8 +19365,8 @@ int printf_va_459(char const * restrict format, char *param0,
 int printf_va_460(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19382,8 +19382,8 @@ int printf_va_460(char const * restrict format, char *param0,
 int printf_va_461(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19399,8 +19399,8 @@ int printf_va_461(char const * restrict format, char *param0,
 int printf_va_462(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19416,8 +19416,8 @@ int printf_va_462(char const * restrict format, char *param0,
 int printf_va_463(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19569,8 +19569,8 @@ int test_strfirstsame_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19585,8 +19585,8 @@ int test_strfirstsame_s(void)
 int printf_va_465(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19601,8 +19601,8 @@ int printf_va_465(char const * restrict format, char *param0,
 int printf_va_466(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19617,8 +19617,8 @@ int printf_va_466(char const * restrict format, char *param0,
 int printf_va_467(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19633,8 +19633,8 @@ int printf_va_467(char const * restrict format, char *param0,
 int printf_va_468(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19649,8 +19649,8 @@ int printf_va_468(char const * restrict format, char *param0,
 int printf_va_469(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19665,8 +19665,8 @@ int printf_va_469(char const * restrict format, char *param0,
 int printf_va_470(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19681,8 +19681,8 @@ int printf_va_470(char const * restrict format, char *param0,
 int printf_va_471(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19697,8 +19697,8 @@ int printf_va_471(char const * restrict format, char *param0,
 int printf_va_472(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19713,8 +19713,8 @@ int printf_va_472(char const * restrict format, char *param0,
 int printf_va_473(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19729,8 +19729,8 @@ int printf_va_473(char const * restrict format, char *param0,
 int printf_va_474(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19816,8 +19816,8 @@ int test_strisalphanumeric_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19832,8 +19832,8 @@ int test_strisalphanumeric_s(void)
 int printf_va_476(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19848,8 +19848,8 @@ int printf_va_476(char const * restrict format, char *param0,
 int printf_va_477(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19864,8 +19864,8 @@ int printf_va_477(char const * restrict format, char *param0,
 int printf_va_478(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19880,8 +19880,8 @@ int printf_va_478(char const * restrict format, char *param0,
 int printf_va_479(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19896,8 +19896,8 @@ int printf_va_479(char const * restrict format, char *param0,
 int printf_va_480(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19912,8 +19912,8 @@ int printf_va_480(char const * restrict format, char *param0,
 int printf_va_481(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19928,8 +19928,8 @@ int printf_va_481(char const * restrict format, char *param0,
 int printf_va_482(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19944,8 +19944,8 @@ int printf_va_482(char const * restrict format, char *param0,
 int printf_va_483(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -19960,8 +19960,8 @@ int printf_va_483(char const * restrict format, char *param0,
 int printf_va_484(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20040,8 +20040,8 @@ int test_strisascii_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20056,8 +20056,8 @@ int test_strisascii_s(void)
 int printf_va_486(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20072,8 +20072,8 @@ int printf_va_486(char const * restrict format, char *param0,
 int printf_va_487(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20088,8 +20088,8 @@ int printf_va_487(char const * restrict format, char *param0,
 int printf_va_488(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20104,8 +20104,8 @@ int printf_va_488(char const * restrict format, char *param0,
 int printf_va_489(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20120,8 +20120,8 @@ int printf_va_489(char const * restrict format, char *param0,
 int printf_va_490(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20136,8 +20136,8 @@ int printf_va_490(char const * restrict format, char *param0,
 int printf_va_491(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20152,8 +20152,8 @@ int printf_va_491(char const * restrict format, char *param0,
 int printf_va_492(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20168,8 +20168,8 @@ int printf_va_492(char const * restrict format, char *param0,
 int printf_va_493(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20244,8 +20244,8 @@ int test_strisdigit_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20260,8 +20260,8 @@ int test_strisdigit_s(void)
 int printf_va_495(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20276,8 +20276,8 @@ int printf_va_495(char const * restrict format, char *param0,
 int printf_va_496(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20292,8 +20292,8 @@ int printf_va_496(char const * restrict format, char *param0,
 int printf_va_497(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20308,8 +20308,8 @@ int printf_va_497(char const * restrict format, char *param0,
 int printf_va_498(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20324,8 +20324,8 @@ int printf_va_498(char const * restrict format, char *param0,
 int printf_va_499(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20340,8 +20340,8 @@ int printf_va_499(char const * restrict format, char *param0,
 int printf_va_500(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20356,8 +20356,8 @@ int printf_va_500(char const * restrict format, char *param0,
 int printf_va_501(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20372,8 +20372,8 @@ int printf_va_501(char const * restrict format, char *param0,
 int printf_va_502(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20388,8 +20388,8 @@ int printf_va_502(char const * restrict format, char *param0,
 int printf_va_503(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20404,8 +20404,8 @@ int printf_va_503(char const * restrict format, char *param0,
 int printf_va_504(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20491,8 +20491,8 @@ int test_strishex_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20507,8 +20507,8 @@ int test_strishex_s(void)
 int printf_va_506(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20523,8 +20523,8 @@ int printf_va_506(char const * restrict format, char *param0,
 int printf_va_507(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20539,8 +20539,8 @@ int printf_va_507(char const * restrict format, char *param0,
 int printf_va_508(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20555,8 +20555,8 @@ int printf_va_508(char const * restrict format, char *param0,
 int printf_va_509(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20571,8 +20571,8 @@ int printf_va_509(char const * restrict format, char *param0,
 int printf_va_510(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20587,8 +20587,8 @@ int printf_va_510(char const * restrict format, char *param0,
 int printf_va_511(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20603,8 +20603,8 @@ int printf_va_511(char const * restrict format, char *param0,
 int printf_va_512(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20673,8 +20673,8 @@ int test_strislowercase_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20689,8 +20689,8 @@ int test_strislowercase_s(void)
 int printf_va_514(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20705,8 +20705,8 @@ int printf_va_514(char const * restrict format, char *param0,
 int printf_va_515(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20721,8 +20721,8 @@ int printf_va_515(char const * restrict format, char *param0,
 int printf_va_516(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20737,8 +20737,8 @@ int printf_va_516(char const * restrict format, char *param0,
 int printf_va_517(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20753,8 +20753,8 @@ int printf_va_517(char const * restrict format, char *param0,
 int printf_va_518(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20769,8 +20769,8 @@ int printf_va_518(char const * restrict format, char *param0,
 int printf_va_519(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20785,8 +20785,8 @@ int printf_va_519(char const * restrict format, char *param0,
 int printf_va_520(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20801,8 +20801,8 @@ int printf_va_520(char const * restrict format, char *param0,
 int printf_va_521(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20877,8 +20877,8 @@ int test_strismixed_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20893,8 +20893,8 @@ int test_strismixed_s(void)
 int printf_va_523(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20909,8 +20909,8 @@ int printf_va_523(char const * restrict format, char *param0,
 int printf_va_524(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20925,8 +20925,8 @@ int printf_va_524(char const * restrict format, char *param0,
 int printf_va_525(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20941,8 +20941,8 @@ int printf_va_525(char const * restrict format, char *param0,
 int printf_va_526(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20957,8 +20957,8 @@ int printf_va_526(char const * restrict format, char *param0,
 int printf_va_527(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20973,8 +20973,8 @@ int printf_va_527(char const * restrict format, char *param0,
 int printf_va_528(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -20989,8 +20989,8 @@ int printf_va_528(char const * restrict format, char *param0,
 int printf_va_529(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21005,8 +21005,8 @@ int printf_va_529(char const * restrict format, char *param0,
 int printf_va_530(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21021,8 +21021,8 @@ int printf_va_530(char const * restrict format, char *param0,
 int printf_va_531(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21037,8 +21037,8 @@ int printf_va_531(char const * restrict format, char *param0,
 int printf_va_532(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21119,8 +21119,8 @@ int test_strispassword_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21135,8 +21135,8 @@ int test_strispassword_s(void)
 int printf_va_534(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21151,8 +21151,8 @@ int printf_va_534(char const * restrict format, char *param0,
 int printf_va_535(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21167,8 +21167,8 @@ int printf_va_535(char const * restrict format, char *param0,
 int printf_va_536(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21183,8 +21183,8 @@ int printf_va_536(char const * restrict format, char *param0,
 int printf_va_537(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21199,8 +21199,8 @@ int printf_va_537(char const * restrict format, char *param0,
 int printf_va_538(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21215,8 +21215,8 @@ int printf_va_538(char const * restrict format, char *param0,
 int printf_va_539(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21231,8 +21231,8 @@ int printf_va_539(char const * restrict format, char *param0,
 int printf_va_540(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21247,8 +21247,8 @@ int printf_va_540(char const * restrict format, char *param0,
 int printf_va_541(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21323,8 +21323,8 @@ int test_strisuppercase_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21340,8 +21340,8 @@ int test_strisuppercase_s(void)
 int printf_va_543(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21357,8 +21357,8 @@ int printf_va_543(char const * restrict format, char *param0,
 int printf_va_544(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21374,8 +21374,8 @@ int printf_va_544(char const * restrict format, char *param0,
 int printf_va_545(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21391,8 +21391,8 @@ int printf_va_545(char const * restrict format, char *param0,
 int printf_va_546(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21408,8 +21408,8 @@ int printf_va_546(char const * restrict format, char *param0,
 int printf_va_547(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21425,8 +21425,8 @@ int printf_va_547(char const * restrict format, char *param0,
 int printf_va_548(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21442,8 +21442,8 @@ int printf_va_548(char const * restrict format, char *param0,
 int printf_va_549(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21459,8 +21459,8 @@ int printf_va_549(char const * restrict format, char *param0,
 int printf_va_550(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21476,8 +21476,8 @@ int printf_va_550(char const * restrict format, char *param0,
 int printf_va_551(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21493,8 +21493,8 @@ int printf_va_551(char const * restrict format, char *param0,
 int printf_va_552(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21510,8 +21510,8 @@ int printf_va_552(char const * restrict format, char *param0,
 int printf_va_553(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21527,8 +21527,8 @@ int printf_va_553(char const * restrict format, char *param0,
 int printf_va_554(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21544,8 +21544,8 @@ int printf_va_554(char const * restrict format, char *param0,
 int printf_va_555(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21560,8 +21560,8 @@ int printf_va_555(char const * restrict format, char *param0,
 int printf_va_556(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21577,8 +21577,8 @@ int printf_va_556(char const * restrict format, char *param0,
 int printf_va_557(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21593,8 +21593,8 @@ int printf_va_557(char const * restrict format, char *param0,
 int printf_va_558(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21610,8 +21610,8 @@ int printf_va_558(char const * restrict format, char *param0,
 int printf_va_559(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21626,8 +21626,8 @@ int printf_va_559(char const * restrict format, char *param0,
 int printf_va_560(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21727,8 +21727,8 @@ int test_strlastchar_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21743,8 +21743,8 @@ int test_strlastchar_s(void)
 int printf_va_562(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21760,8 +21760,8 @@ int printf_va_562(char const * restrict format, char *param0,
 int printf_va_563(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21776,8 +21776,8 @@ int printf_va_563(char const * restrict format, char *param0,
 int printf_va_564(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21793,8 +21793,8 @@ int printf_va_564(char const * restrict format, char *param0,
 int printf_va_565(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21809,8 +21809,8 @@ int printf_va_565(char const * restrict format, char *param0,
 int printf_va_566(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21825,8 +21825,8 @@ int printf_va_566(char const * restrict format, char *param0,
 int printf_va_567(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21842,8 +21842,8 @@ int printf_va_567(char const * restrict format, char *param0,
 int printf_va_568(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21858,8 +21858,8 @@ int printf_va_568(char const * restrict format, char *param0,
 int printf_va_569(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21875,8 +21875,8 @@ int printf_va_569(char const * restrict format, char *param0,
 int printf_va_570(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21891,8 +21891,8 @@ int printf_va_570(char const * restrict format, char *param0,
 int printf_va_571(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21908,8 +21908,8 @@ int printf_va_571(char const * restrict format, char *param0,
 int printf_va_572(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21924,8 +21924,8 @@ int printf_va_572(char const * restrict format, char *param0,
 int printf_va_573(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21941,8 +21941,8 @@ int printf_va_573(char const * restrict format, char *param0,
 int printf_va_574(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21957,8 +21957,8 @@ int printf_va_574(char const * restrict format, char *param0,
 int printf_va_575(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21974,8 +21974,8 @@ int printf_va_575(char const * restrict format, char *param0,
 int printf_va_576(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -21990,8 +21990,8 @@ int printf_va_576(char const * restrict format, char *param0,
 int printf_va_577(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22007,8 +22007,8 @@ int printf_va_577(char const * restrict format, char *param0,
 int printf_va_578(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22023,8 +22023,8 @@ int printf_va_578(char const * restrict format, char *param0,
 int printf_va_579(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22040,8 +22040,8 @@ int printf_va_579(char const * restrict format, char *param0,
 int printf_va_580(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22056,8 +22056,8 @@ int printf_va_580(char const * restrict format, char *param0,
 int printf_va_581(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22073,8 +22073,8 @@ int printf_va_581(char const * restrict format, char *param0,
 int printf_va_582(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22089,8 +22089,8 @@ int printf_va_582(char const * restrict format, char *param0,
 int printf_va_583(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22212,8 +22212,8 @@ int test_strlastdiff_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22228,8 +22228,8 @@ int test_strlastdiff_s(void)
 int printf_va_585(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22245,8 +22245,8 @@ int printf_va_585(char const * restrict format, char *param0,
 int printf_va_586(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22261,8 +22261,8 @@ int printf_va_586(char const * restrict format, char *param0,
 int printf_va_587(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22278,8 +22278,8 @@ int printf_va_587(char const * restrict format, char *param0,
 int printf_va_588(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22294,8 +22294,8 @@ int printf_va_588(char const * restrict format, char *param0,
 int printf_va_589(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22310,8 +22310,8 @@ int printf_va_589(char const * restrict format, char *param0,
 int printf_va_590(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22327,8 +22327,8 @@ int printf_va_590(char const * restrict format, char *param0,
 int printf_va_591(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22343,8 +22343,8 @@ int printf_va_591(char const * restrict format, char *param0,
 int printf_va_592(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22360,8 +22360,8 @@ int printf_va_592(char const * restrict format, char *param0,
 int printf_va_593(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22376,8 +22376,8 @@ int printf_va_593(char const * restrict format, char *param0,
 int printf_va_594(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22393,8 +22393,8 @@ int printf_va_594(char const * restrict format, char *param0,
 int printf_va_595(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22409,8 +22409,8 @@ int printf_va_595(char const * restrict format, char *param0,
 int printf_va_596(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22426,8 +22426,8 @@ int printf_va_596(char const * restrict format, char *param0,
 int printf_va_597(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22442,8 +22442,8 @@ int printf_va_597(char const * restrict format, char *param0,
 int printf_va_598(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22459,8 +22459,8 @@ int printf_va_598(char const * restrict format, char *param0,
 int printf_va_599(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22475,8 +22475,8 @@ int printf_va_599(char const * restrict format, char *param0,
 int printf_va_600(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22492,8 +22492,8 @@ int printf_va_600(char const * restrict format, char *param0,
 int printf_va_601(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22508,8 +22508,8 @@ int printf_va_601(char const * restrict format, char *param0,
 int printf_va_602(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22525,8 +22525,8 @@ int printf_va_602(char const * restrict format, char *param0,
 int printf_va_603(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22542,8 +22542,8 @@ int printf_va_603(char const * restrict format, char *param0,
 int printf_va_604(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22559,8 +22559,8 @@ int printf_va_604(char const * restrict format, char *param0,
 int printf_va_605(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22576,8 +22576,8 @@ int printf_va_605(char const * restrict format, char *param0,
 int printf_va_606(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22593,8 +22593,8 @@ int printf_va_606(char const * restrict format, char *param0,
 int printf_va_607(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22610,8 +22610,8 @@ int printf_va_607(char const * restrict format, char *param0,
 int printf_va_608(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22627,8 +22627,8 @@ int printf_va_608(char const * restrict format, char *param0,
 int printf_va_609(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22644,8 +22644,8 @@ int printf_va_609(char const * restrict format, char *param0,
 int printf_va_610(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22661,8 +22661,8 @@ int printf_va_610(char const * restrict format, char *param0,
 int printf_va_611(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22678,8 +22678,8 @@ int printf_va_611(char const * restrict format, char *param0,
 int printf_va_612(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22831,8 +22831,8 @@ int test_strlastsame_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22847,8 +22847,8 @@ int test_strlastsame_s(void)
 int printf_va_614(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22863,8 +22863,8 @@ int printf_va_614(char const * restrict format, char *param0,
 int printf_va_615(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22879,8 +22879,8 @@ int printf_va_615(char const * restrict format, char *param0,
 int printf_va_616(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22895,8 +22895,8 @@ int printf_va_616(char const * restrict format, char *param0,
 int printf_va_617(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22911,9 +22911,9 @@ int printf_va_617(char const * restrict format, char *param0,
 int printf_va_618(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22928,8 +22928,8 @@ int printf_va_618(char const * restrict format, char *param0,
 int printf_va_619(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22944,9 +22944,9 @@ int printf_va_619(char const * restrict format, char *param0,
 int printf_va_620(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22961,8 +22961,8 @@ int printf_va_620(char const * restrict format, char *param0,
 int printf_va_621(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22977,9 +22977,9 @@ int printf_va_621(char const * restrict format, char *param0,
 int printf_va_622(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -22994,8 +22994,8 @@ int printf_va_622(char const * restrict format, char *param0,
 int printf_va_623(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23010,9 +23010,9 @@ int printf_va_623(char const * restrict format, char *param0,
 int printf_va_624(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23027,8 +23027,8 @@ int printf_va_624(char const * restrict format, char *param0,
 int printf_va_625(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23043,9 +23043,9 @@ int printf_va_625(char const * restrict format, char *param0,
 int printf_va_626(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23060,8 +23060,8 @@ int printf_va_626(char const * restrict format, char *param0,
 int printf_va_627(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23076,9 +23076,9 @@ int printf_va_627(char const * restrict format, char *param0,
 int printf_va_628(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23094,8 +23094,8 @@ int printf_va_628(char const * restrict format, char *param0,
 int printf_va_629(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23110,9 +23110,9 @@ int printf_va_629(char const * restrict format, char *param0,
 int printf_va_630(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23127,8 +23127,8 @@ int printf_va_630(char const * restrict format, char *param0,
 int printf_va_631(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23143,9 +23143,9 @@ int printf_va_631(char const * restrict format, char *param0,
 int printf_va_632(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23160,8 +23160,8 @@ int printf_va_632(char const * restrict format, char *param0,
 int printf_va_633(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23176,9 +23176,9 @@ int printf_va_633(char const * restrict format, char *param0,
 int printf_va_634(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23193,8 +23193,8 @@ int printf_va_634(char const * restrict format, char *param0,
 int printf_va_635(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23209,8 +23209,8 @@ int printf_va_635(char const * restrict format, char *param0,
 int printf_va_636(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23543,8 +23543,8 @@ int test_strncpy_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23559,8 +23559,8 @@ int test_strncpy_s(void)
 int printf_va_638(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23575,8 +23575,8 @@ int printf_va_638(char const * restrict format, char *param0,
 int printf_va_639(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23591,8 +23591,8 @@ int printf_va_639(char const * restrict format, char *param0,
 int printf_va_640(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23608,8 +23608,8 @@ int printf_va_640(char const * restrict format, char *param0,
 int printf_va_641(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23625,8 +23625,8 @@ int printf_va_641(char const * restrict format, char *param0,
 int printf_va_642(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23642,8 +23642,8 @@ int printf_va_642(char const * restrict format, char *param0,
 int printf_va_643(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23659,8 +23659,8 @@ int printf_va_643(char const * restrict format, char *param0,
 int printf_va_644(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23675,8 +23675,8 @@ int printf_va_644(char const * restrict format, char *param0,
 int printf_va_645(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23691,8 +23691,8 @@ int printf_va_645(char const * restrict format, char *param0,
 int printf_va_646(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23768,8 +23768,8 @@ int test_strnlen_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23784,8 +23784,8 @@ int test_strnlen_s(void)
 int printf_va_648(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23800,8 +23800,8 @@ int printf_va_648(char const * restrict format, char *param0,
 int printf_va_649(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23816,8 +23816,8 @@ int printf_va_649(char const * restrict format, char *param0,
 int printf_va_650(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23833,8 +23833,8 @@ int printf_va_650(char const * restrict format, char *param0,
 int printf_va_651(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23850,8 +23850,8 @@ int printf_va_651(char const * restrict format, char *param0,
 int printf_va_652(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23867,8 +23867,8 @@ int printf_va_652(char const * restrict format, char *param0,
 int printf_va_653(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23884,8 +23884,8 @@ int printf_va_653(char const * restrict format, char *param0,
 int printf_va_654(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23901,8 +23901,8 @@ int printf_va_654(char const * restrict format, char *param0,
 int printf_va_655(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23918,8 +23918,8 @@ int printf_va_655(char const * restrict format, char *param0,
 int printf_va_656(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, size_t param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23934,8 +23934,8 @@ int printf_va_656(char const * restrict format, char *param0,
 int printf_va_657(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23950,8 +23950,8 @@ int printf_va_657(char const * restrict format, char *param0,
 int printf_va_658(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23966,8 +23966,8 @@ int printf_va_658(char const * restrict format, char *param0,
 int printf_va_659(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -23982,8 +23982,8 @@ int printf_va_659(char const * restrict format, char *param0,
 int printf_va_660(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24103,8 +24103,8 @@ int test_strnterminate_s(void)
 
 static char str1_8[128];
 static char str2_8[128];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24119,8 +24119,8 @@ static char str2_8[128];
 int printf_va_662(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24135,8 +24135,8 @@ int printf_va_662(char const * restrict format, char *param0,
 int printf_va_663(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24152,8 +24152,8 @@ int printf_va_663(char const * restrict format, char *param0,
 int printf_va_664(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24168,8 +24168,8 @@ int printf_va_664(char const * restrict format, char *param0,
 int printf_va_665(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24185,8 +24185,8 @@ int printf_va_665(char const * restrict format, char *param0,
 int printf_va_666(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24201,8 +24201,8 @@ int printf_va_666(char const * restrict format, char *param0,
 int printf_va_667(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24217,8 +24217,8 @@ int printf_va_667(char const * restrict format, char *param0,
 int printf_va_668(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24234,8 +24234,8 @@ int printf_va_668(char const * restrict format, char *param0,
 int printf_va_669(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24250,8 +24250,8 @@ int printf_va_669(char const * restrict format, char *param0,
 int printf_va_670(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24267,8 +24267,8 @@ int printf_va_670(char const * restrict format, char *param0,
 int printf_va_671(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24283,8 +24283,8 @@ int printf_va_671(char const * restrict format, char *param0,
 int printf_va_672(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24300,8 +24300,8 @@ int printf_va_672(char const * restrict format, char *param0,
 int printf_va_673(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24317,8 +24317,8 @@ int printf_va_673(char const * restrict format, char *param0,
 int printf_va_674(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24334,8 +24334,8 @@ int printf_va_674(char const * restrict format, char *param0,
 int printf_va_675(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24351,8 +24351,8 @@ int printf_va_675(char const * restrict format, char *param0,
 int printf_va_676(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24368,8 +24368,8 @@ int printf_va_676(char const * restrict format, char *param0,
 int printf_va_677(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24385,8 +24385,8 @@ int printf_va_677(char const * restrict format, char *param0,
 int printf_va_678(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24402,8 +24402,8 @@ int printf_va_678(char const * restrict format, char *param0,
 int printf_va_679(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24419,8 +24419,8 @@ int printf_va_679(char const * restrict format, char *param0,
 int printf_va_680(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24436,8 +24436,8 @@ int printf_va_680(char const * restrict format, char *param0,
 int printf_va_681(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24453,8 +24453,8 @@ int printf_va_681(char const * restrict format, char *param0,
 int printf_va_682(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24469,8 +24469,8 @@ int printf_va_682(char const * restrict format, char *param0,
 int printf_va_683(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24486,8 +24486,8 @@ int printf_va_683(char const * restrict format, char *param0,
 int printf_va_684(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24502,8 +24502,8 @@ int printf_va_684(char const * restrict format, char *param0,
 int printf_va_685(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24519,8 +24519,8 @@ int printf_va_685(char const * restrict format, char *param0,
 int printf_va_686(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24535,8 +24535,8 @@ int printf_va_686(char const * restrict format, char *param0,
 int printf_va_687(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24552,8 +24552,8 @@ int printf_va_687(char const * restrict format, char *param0,
 int printf_va_688(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24568,8 +24568,8 @@ int printf_va_688(char const * restrict format, char *param0,
 int printf_va_689(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24585,8 +24585,8 @@ int printf_va_689(char const * restrict format, char *param0,
 int printf_va_690(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24601,8 +24601,8 @@ int printf_va_690(char const * restrict format, char *param0,
 int printf_va_691(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24618,8 +24618,8 @@ int printf_va_691(char const * restrict format, char *param0,
 int printf_va_692(char const * restrict format, char *param0,
                   unsigned int param1, void *param2, void *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24634,8 +24634,8 @@ int printf_va_692(char const * restrict format, char *param0,
 int printf_va_693(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24798,8 +24798,8 @@ int test_strpbrk_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24814,8 +24814,8 @@ int test_strpbrk_s(void)
 int printf_va_695(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24830,8 +24830,8 @@ int printf_va_695(char const * restrict format, char *param0,
 int printf_va_696(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24846,8 +24846,8 @@ int printf_va_696(char const * restrict format, char *param0,
 int printf_va_697(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24862,8 +24862,8 @@ int printf_va_697(char const * restrict format, char *param0,
 int printf_va_698(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24878,8 +24878,8 @@ int printf_va_698(char const * restrict format, char *param0,
 int printf_va_699(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24894,8 +24894,8 @@ int printf_va_699(char const * restrict format, char *param0,
 int printf_va_700(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24910,8 +24910,8 @@ int printf_va_700(char const * restrict format, char *param0,
 int printf_va_701(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24926,8 +24926,8 @@ int printf_va_701(char const * restrict format, char *param0,
 int printf_va_702(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24942,8 +24942,8 @@ int printf_va_702(char const * restrict format, char *param0,
 int printf_va_703(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24958,8 +24958,8 @@ int printf_va_703(char const * restrict format, char *param0,
 int printf_va_704(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24974,8 +24974,8 @@ int printf_va_704(char const * restrict format, char *param0,
 int printf_va_705(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -24990,8 +24990,8 @@ int printf_va_705(char const * restrict format, char *param0,
 int printf_va_706(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25084,8 +25084,8 @@ int test_strprefix_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25100,8 +25100,8 @@ int test_strprefix_s(void)
 int printf_va_708(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25116,8 +25116,8 @@ int printf_va_708(char const * restrict format, char *param0,
 int printf_va_709(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25132,8 +25132,8 @@ int printf_va_709(char const * restrict format, char *param0,
 int printf_va_710(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25148,9 +25148,9 @@ int printf_va_710(char const * restrict format, char *param0,
 int printf_va_711(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25165,9 +25165,9 @@ int printf_va_711(char const * restrict format, char *param0,
 int printf_va_712(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25183,9 +25183,9 @@ int printf_va_712(char const * restrict format, char *param0,
 int printf_va_713(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2, char *param3);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25201,9 +25201,9 @@ int printf_va_713(char const * restrict format, char *param0,
 int printf_va_714(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2, char *param3);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25219,9 +25219,9 @@ int printf_va_714(char const * restrict format, char *param0,
 int printf_va_715(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2, char *param3);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25237,8 +25237,8 @@ int printf_va_715(char const * restrict format, char *param0,
 int printf_va_716(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25253,9 +25253,9 @@ int printf_va_716(char const * restrict format, char *param0,
 int printf_va_717(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25270,8 +25270,8 @@ int printf_va_717(char const * restrict format, char *param0,
 int printf_va_718(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25286,9 +25286,9 @@ int printf_va_718(char const * restrict format, char *param0,
 int printf_va_719(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25303,8 +25303,8 @@ int printf_va_719(char const * restrict format, char *param0,
 int printf_va_720(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25319,9 +25319,9 @@ int printf_va_720(char const * restrict format, char *param0,
 int printf_va_721(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25336,8 +25336,8 @@ int printf_va_721(char const * restrict format, char *param0,
 int printf_va_722(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25352,9 +25352,9 @@ int printf_va_722(char const * restrict format, char *param0,
 int printf_va_723(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25369,8 +25369,8 @@ int printf_va_723(char const * restrict format, char *param0,
 int printf_va_724(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25385,9 +25385,9 @@ int printf_va_724(char const * restrict format, char *param0,
 int printf_va_725(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25402,8 +25402,8 @@ int printf_va_725(char const * restrict format, char *param0,
 int printf_va_726(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25418,9 +25418,9 @@ int printf_va_726(char const * restrict format, char *param0,
 int printf_va_727(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25435,8 +25435,8 @@ int printf_va_727(char const * restrict format, char *param0,
 int printf_va_728(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25451,9 +25451,9 @@ int printf_va_728(char const * restrict format, char *param0,
 int printf_va_729(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25592,8 +25592,8 @@ int test_strremovews_s(void)
 
 static char str1_9[128];
 static char str2_9[128];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25608,8 +25608,8 @@ static char str2_9[128];
 int printf_va_731(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25625,8 +25625,8 @@ int printf_va_731(char const * restrict format, char *param0,
 int printf_va_732(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25641,8 +25641,8 @@ int printf_va_732(char const * restrict format, char *param0,
 int printf_va_733(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25658,8 +25658,8 @@ int printf_va_733(char const * restrict format, char *param0,
 int printf_va_734(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25674,8 +25674,8 @@ int printf_va_734(char const * restrict format, char *param0,
 int printf_va_735(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25690,8 +25690,8 @@ int printf_va_735(char const * restrict format, char *param0,
 int printf_va_736(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25707,8 +25707,8 @@ int printf_va_736(char const * restrict format, char *param0,
 int printf_va_737(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25723,8 +25723,8 @@ int printf_va_737(char const * restrict format, char *param0,
 int printf_va_738(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25740,8 +25740,8 @@ int printf_va_738(char const * restrict format, char *param0,
 int printf_va_739(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25756,8 +25756,8 @@ int printf_va_739(char const * restrict format, char *param0,
 int printf_va_740(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25773,8 +25773,8 @@ int printf_va_740(char const * restrict format, char *param0,
 int printf_va_741(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25789,8 +25789,8 @@ int printf_va_741(char const * restrict format, char *param0,
 int printf_va_742(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25806,8 +25806,8 @@ int printf_va_742(char const * restrict format, char *param0,
 int printf_va_743(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25822,8 +25822,8 @@ int printf_va_743(char const * restrict format, char *param0,
 int printf_va_744(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25839,8 +25839,8 @@ int printf_va_744(char const * restrict format, char *param0,
 int printf_va_745(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25855,8 +25855,8 @@ int printf_va_745(char const * restrict format, char *param0,
 int printf_va_746(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25872,8 +25872,8 @@ int printf_va_746(char const * restrict format, char *param0,
 int printf_va_747(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25888,8 +25888,8 @@ int printf_va_747(char const * restrict format, char *param0,
 int printf_va_748(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25905,8 +25905,8 @@ int printf_va_748(char const * restrict format, char *param0,
 int printf_va_749(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25921,8 +25921,8 @@ int printf_va_749(char const * restrict format, char *param0,
 int printf_va_750(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25938,8 +25938,8 @@ int printf_va_750(char const * restrict format, char *param0,
 int printf_va_751(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25954,8 +25954,8 @@ int printf_va_751(char const * restrict format, char *param0,
 int printf_va_752(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25971,8 +25971,8 @@ int printf_va_752(char const * restrict format, char *param0,
 int printf_va_753(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -25987,8 +25987,8 @@ int printf_va_753(char const * restrict format, char *param0,
 int printf_va_754(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26004,8 +26004,8 @@ int printf_va_754(char const * restrict format, char *param0,
 int printf_va_755(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26020,8 +26020,8 @@ int printf_va_755(char const * restrict format, char *param0,
 int printf_va_756(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26037,8 +26037,8 @@ int printf_va_756(char const * restrict format, char *param0,
 int printf_va_757(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26053,8 +26053,8 @@ int printf_va_757(char const * restrict format, char *param0,
 int printf_va_758(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26070,8 +26070,8 @@ int printf_va_758(char const * restrict format, char *param0,
 int printf_va_759(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26086,8 +26086,8 @@ int printf_va_759(char const * restrict format, char *param0,
 int printf_va_760(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26103,8 +26103,8 @@ int printf_va_760(char const * restrict format, char *param0,
 int printf_va_761(char const * restrict format, char *param0,
                   unsigned int param1, size_t param2, int param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26119,8 +26119,8 @@ int printf_va_761(char const * restrict format, char *param0,
 int printf_va_762(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26310,8 +26310,8 @@ int test_strspn_s(void)
 
 static char str1_10[128];
 static char str2_10[128];
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26326,8 +26326,8 @@ static char str2_10[128];
 int printf_va_764(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26342,8 +26342,8 @@ int printf_va_764(char const * restrict format, char *param0,
 int printf_va_765(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26358,8 +26358,8 @@ int printf_va_765(char const * restrict format, char *param0,
 int printf_va_766(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26374,8 +26374,8 @@ int printf_va_766(char const * restrict format, char *param0,
 int printf_va_767(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26390,8 +26390,8 @@ int printf_va_767(char const * restrict format, char *param0,
 int printf_va_768(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26406,8 +26406,8 @@ int printf_va_768(char const * restrict format, char *param0,
 int printf_va_769(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26422,8 +26422,8 @@ int printf_va_769(char const * restrict format, char *param0,
 int printf_va_770(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26438,8 +26438,8 @@ int printf_va_770(char const * restrict format, char *param0,
 int printf_va_771(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26454,8 +26454,8 @@ int printf_va_771(char const * restrict format, char *param0,
 int printf_va_772(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26470,8 +26470,8 @@ int printf_va_772(char const * restrict format, char *param0,
 int printf_va_773(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26486,8 +26486,8 @@ int printf_va_773(char const * restrict format, char *param0,
 int printf_va_774(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26502,8 +26502,8 @@ int printf_va_774(char const * restrict format, char *param0,
 int printf_va_775(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26518,8 +26518,8 @@ int printf_va_775(char const * restrict format, char *param0,
 int printf_va_776(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26534,8 +26534,8 @@ int printf_va_776(char const * restrict format, char *param0,
 int printf_va_777(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26550,8 +26550,8 @@ int printf_va_777(char const * restrict format, char *param0,
 int printf_va_778(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26566,8 +26566,8 @@ int printf_va_778(char const * restrict format, char *param0,
 int printf_va_779(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26582,8 +26582,8 @@ int printf_va_779(char const * restrict format, char *param0,
 int printf_va_780(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26598,8 +26598,8 @@ int printf_va_780(char const * restrict format, char *param0,
 int printf_va_781(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26614,8 +26614,8 @@ int printf_va_781(char const * restrict format, char *param0,
 int printf_va_782(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26630,8 +26630,8 @@ int printf_va_782(char const * restrict format, char *param0,
 int printf_va_783(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26646,8 +26646,8 @@ int printf_va_783(char const * restrict format, char *param0,
 int printf_va_784(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26662,8 +26662,8 @@ int printf_va_784(char const * restrict format, char *param0,
 int printf_va_785(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26678,8 +26678,8 @@ int printf_va_785(char const * restrict format, char *param0,
 int printf_va_786(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26694,9 +26694,9 @@ int printf_va_786(char const * restrict format, char *param0,
 int printf_va_787(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26712,8 +26712,8 @@ int printf_va_787(char const * restrict format, char *param0,
 int printf_va_788(char const * restrict format, char *param0,
                   unsigned int param1, int param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26728,9 +26728,9 @@ int printf_va_788(char const * restrict format, char *param0,
 int printf_va_789(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param3);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26746,8 +26746,8 @@ int printf_va_789(char const * restrict format, char *param0,
 int printf_va_790(char const * restrict format, char *param0,
                   unsigned int param1, int param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26762,8 +26762,8 @@ int printf_va_790(char const * restrict format, char *param0,
 int printf_va_791(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26778,8 +26778,8 @@ int printf_va_791(char const * restrict format, char *param0,
 int printf_va_792(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26794,8 +26794,8 @@ int printf_va_792(char const * restrict format, char *param0,
 int printf_va_793(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26810,8 +26810,8 @@ int printf_va_793(char const * restrict format, char *param0,
 int printf_va_794(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26826,8 +26826,8 @@ int printf_va_794(char const * restrict format, char *param0,
 int printf_va_795(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26842,8 +26842,8 @@ int printf_va_795(char const * restrict format, char *param0,
 int printf_va_796(char const * restrict format, char *param0,
                   unsigned int param1, int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26858,8 +26858,8 @@ int printf_va_796(char const * restrict format, char *param0,
 int printf_va_797(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -26874,8 +26874,8 @@ int printf_va_797(char const * restrict format, char *param0,
 int printf_va_798(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27048,8 +27048,8 @@ int test_strstr_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27064,8 +27064,8 @@ int test_strstr_s(void)
 int printf_va_800(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27080,8 +27080,8 @@ int printf_va_800(char const * restrict format, char *param0,
 int printf_va_801(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27096,8 +27096,8 @@ int printf_va_801(char const * restrict format, char *param0,
 int printf_va_802(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27112,8 +27112,8 @@ int printf_va_802(char const * restrict format, char *param0,
 int printf_va_803(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27128,10 +27128,10 @@ int printf_va_803(char const * restrict format, char *param0,
 int printf_va_804(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27148,10 +27148,10 @@ int printf_va_804(char const * restrict format, char *param0,
 int printf_va_805(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27168,9 +27168,9 @@ int printf_va_805(char const * restrict format, char *param0,
 int printf_va_806(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27184,10 +27184,10 @@ int printf_va_806(char const * restrict format, char *param0,
  */
 int printf_va_807(char const * restrict format, char *param0, char *param1);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27204,10 +27204,10 @@ int printf_va_807(char const * restrict format, char *param0, char *param1);
 int printf_va_808(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27224,10 +27224,10 @@ int printf_va_808(char const * restrict format, char *param0,
 int printf_va_809(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27244,10 +27244,10 @@ int printf_va_809(char const * restrict format, char *param0,
 int printf_va_810(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27264,10 +27264,10 @@ int printf_va_810(char const * restrict format, char *param0,
 int printf_va_811(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27284,10 +27284,10 @@ int printf_va_811(char const * restrict format, char *param0,
 int printf_va_812(char const * restrict format, char *param0,
                   unsigned int param1, char *param2, char *param3, int param4);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27397,8 +27397,8 @@ int test_strtok_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27413,8 +27413,8 @@ int test_strtok_s(void)
 int printf_va_814(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27429,8 +27429,8 @@ int printf_va_814(char const * restrict format, char *param0,
 int printf_va_815(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27445,8 +27445,8 @@ int printf_va_815(char const * restrict format, char *param0,
 int printf_va_816(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27461,9 +27461,9 @@ int printf_va_816(char const * restrict format, char *param0,
 int printf_va_817(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27478,8 +27478,8 @@ int printf_va_817(char const * restrict format, char *param0,
 int printf_va_818(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27494,9 +27494,9 @@ int printf_va_818(char const * restrict format, char *param0,
 int printf_va_819(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27511,8 +27511,8 @@ int printf_va_819(char const * restrict format, char *param0,
 int printf_va_820(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27527,9 +27527,9 @@ int printf_va_820(char const * restrict format, char *param0,
 int printf_va_821(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27544,8 +27544,8 @@ int printf_va_821(char const * restrict format, char *param0,
 int printf_va_822(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27560,9 +27560,9 @@ int printf_va_822(char const * restrict format, char *param0,
 int printf_va_823(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27577,8 +27577,8 @@ int printf_va_823(char const * restrict format, char *param0,
 int printf_va_824(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27593,9 +27593,9 @@ int printf_va_824(char const * restrict format, char *param0,
 int printf_va_825(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27610,8 +27610,8 @@ int printf_va_825(char const * restrict format, char *param0,
 int printf_va_826(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27706,8 +27706,8 @@ int test_strtolowercase_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27722,8 +27722,8 @@ int test_strtolowercase_s(void)
 int printf_va_828(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27738,8 +27738,8 @@ int printf_va_828(char const * restrict format, char *param0,
 int printf_va_829(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27754,8 +27754,8 @@ int printf_va_829(char const * restrict format, char *param0,
 int printf_va_830(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27770,8 +27770,8 @@ int printf_va_830(char const * restrict format, char *param0,
 int printf_va_831(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27786,9 +27786,9 @@ int printf_va_831(char const * restrict format, char *param0,
 int printf_va_832(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27803,8 +27803,8 @@ int printf_va_832(char const * restrict format, char *param0,
 int printf_va_833(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27819,9 +27819,9 @@ int printf_va_833(char const * restrict format, char *param0,
 int printf_va_834(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27836,8 +27836,8 @@ int printf_va_834(char const * restrict format, char *param0,
 int printf_va_835(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27852,9 +27852,9 @@ int printf_va_835(char const * restrict format, char *param0,
 int printf_va_836(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27869,8 +27869,8 @@ int printf_va_836(char const * restrict format, char *param0,
 int printf_va_837(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27885,9 +27885,9 @@ int printf_va_837(char const * restrict format, char *param0,
 int printf_va_838(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27902,8 +27902,8 @@ int printf_va_838(char const * restrict format, char *param0,
 int printf_va_839(char const * restrict format, char *param0,
                   unsigned int param1, char *param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -27994,8 +27994,8 @@ int test_strtouppercase_s(void)
   return __retres;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28010,8 +28010,8 @@ int test_strtouppercase_s(void)
 int printf_va_841(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28026,8 +28026,8 @@ int printf_va_841(char const * restrict format, char *param0,
 int printf_va_842(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28042,8 +28042,8 @@ int printf_va_842(char const * restrict format, char *param0,
 int printf_va_843(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28058,8 +28058,8 @@ int printf_va_843(char const * restrict format, char *param0,
 int printf_va_844(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28074,8 +28074,8 @@ int printf_va_844(char const * restrict format, char *param0,
 int printf_va_845(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28090,8 +28090,8 @@ int printf_va_845(char const * restrict format, char *param0,
 int printf_va_846(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28106,8 +28106,8 @@ int printf_va_846(char const * restrict format, char *param0,
 int printf_va_847(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28122,8 +28122,8 @@ int printf_va_847(char const * restrict format, char *param0,
 int printf_va_848(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28138,8 +28138,8 @@ int printf_va_848(char const * restrict format, char *param0,
 int printf_va_849(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28154,8 +28154,8 @@ int printf_va_849(char const * restrict format, char *param0,
 int printf_va_850(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28170,8 +28170,8 @@ int printf_va_850(char const * restrict format, char *param0,
 int printf_va_851(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28186,9 +28186,9 @@ int printf_va_851(char const * restrict format, char *param0,
 int printf_va_852(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28304,8 +28304,8 @@ int printf_va_854(char const * restrict format);
  */
 int printf_va_855(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28320,8 +28320,8 @@ int printf_va_855(char const * restrict format, int param0);
 int printf_va_856(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28349,8 +28349,8 @@ int printf_va_857(char const * restrict format, char *param0,
  */
 int printf_va_858(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28365,8 +28365,8 @@ int printf_va_858(char const * restrict format, int param0);
 int printf_va_859(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28394,8 +28394,8 @@ int printf_va_860(char const * restrict format, char *param0,
  */
 int printf_va_861(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28410,8 +28410,8 @@ int printf_va_861(char const * restrict format, int param0);
 int printf_va_862(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28439,8 +28439,8 @@ int printf_va_863(char const * restrict format, char *param0,
  */
 int printf_va_864(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28455,8 +28455,8 @@ int printf_va_864(char const * restrict format, int param0);
 int printf_va_865(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28471,8 +28471,8 @@ int printf_va_865(char const * restrict format, char *param0,
 int printf_va_866(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28500,8 +28500,8 @@ int printf_va_867(char const * restrict format, char *param0,
  */
 int printf_va_868(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28516,8 +28516,8 @@ int printf_va_868(char const * restrict format, int param0);
 int printf_va_869(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28545,8 +28545,8 @@ int printf_va_870(char const * restrict format, char *param0,
  */
 int printf_va_871(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28561,8 +28561,8 @@ int printf_va_871(char const * restrict format, int param0);
 int printf_va_872(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28590,8 +28590,8 @@ int printf_va_873(char const * restrict format, char *param0,
  */
 int printf_va_874(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28606,8 +28606,8 @@ int printf_va_874(char const * restrict format, int param0);
 int printf_va_875(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28622,8 +28622,8 @@ int printf_va_875(char const * restrict format, char *param0,
 int printf_va_876(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28651,8 +28651,8 @@ int printf_va_877(char const * restrict format, char *param0,
  */
 int printf_va_878(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28667,8 +28667,8 @@ int printf_va_878(char const * restrict format, int param0);
 int printf_va_879(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28683,8 +28683,8 @@ int printf_va_879(char const * restrict format, char *param0,
 int printf_va_880(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28712,8 +28712,8 @@ int printf_va_881(char const * restrict format, char *param0,
  */
 int printf_va_882(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28728,8 +28728,8 @@ int printf_va_882(char const * restrict format, int param0);
 int printf_va_883(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28744,8 +28744,8 @@ int printf_va_883(char const * restrict format, char *param0,
 int printf_va_884(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28773,8 +28773,8 @@ int printf_va_885(char const * restrict format, char *param0,
  */
 int printf_va_886(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28789,8 +28789,8 @@ int printf_va_886(char const * restrict format, int param0);
 int printf_va_887(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28805,9 +28805,9 @@ int printf_va_887(char const * restrict format, char *param0,
 int printf_va_888(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28835,8 +28835,8 @@ int printf_va_889(char const * restrict format, char *param0,
  */
 int printf_va_890(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28851,10 +28851,10 @@ int printf_va_890(char const * restrict format, int param0);
 int printf_va_891(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28873,8 +28873,8 @@ int printf_va_892(char const * restrict format, char *param0,
                   unsigned int param1, wchar_t *param2, wchar_t *param3,
                   unsigned long param4, unsigned int param5);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28902,8 +28902,8 @@ int printf_va_893(char const * restrict format, char *param0,
  */
 int printf_va_894(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28918,8 +28918,8 @@ int printf_va_894(char const * restrict format, int param0);
 int printf_va_895(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28934,8 +28934,8 @@ int printf_va_895(char const * restrict format, char *param0,
 int printf_va_896(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28952,10 +28952,10 @@ int printf_va_897(char const * restrict format, char *param0,
                   unsigned int param1, unsigned long param2,
                   unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -28987,8 +28987,8 @@ int printf_va_898(char const * restrict format, char *param0,
  */
 int printf_va_899(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29003,8 +29003,8 @@ int printf_va_899(char const * restrict format, int param0);
 int printf_va_900(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29019,9 +29019,9 @@ int printf_va_900(char const * restrict format, char *param0,
 int printf_va_901(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29050,8 +29050,8 @@ int printf_va_902(char const * restrict format, char *param0,
  */
 int printf_va_903(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29066,8 +29066,8 @@ int printf_va_903(char const * restrict format, int param0);
 int printf_va_904(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29082,9 +29082,9 @@ int printf_va_904(char const * restrict format, char *param0,
 int printf_va_905(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29113,8 +29113,8 @@ int printf_va_906(char const * restrict format, char *param0,
  */
 int printf_va_907(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29129,9 +29129,9 @@ int printf_va_907(char const * restrict format, int param0);
 int printf_va_908(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29147,8 +29147,8 @@ int printf_va_908(char const * restrict format, char *param0,
 int printf_va_909(char const * restrict format, char *param0,
                   unsigned int param1, wchar_t *param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29176,8 +29176,8 @@ int printf_va_910(char const * restrict format, char *param0,
  */
 int printf_va_911(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29192,8 +29192,8 @@ int printf_va_911(char const * restrict format, int param0);
 int printf_va_912(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29208,9 +29208,9 @@ int printf_va_912(char const * restrict format, char *param0,
 int printf_va_913(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29239,8 +29239,8 @@ int printf_va_914(char const * restrict format, char *param0,
  */
 int printf_va_915(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29255,8 +29255,8 @@ int printf_va_915(char const * restrict format, int param0);
 int printf_va_916(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29271,9 +29271,9 @@ int printf_va_916(char const * restrict format, char *param0,
 int printf_va_917(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29636,8 +29636,8 @@ int printf_va_919(char const * restrict format);
  */
 int printf_va_920(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29665,8 +29665,8 @@ int printf_va_921(char const * restrict format, char *param0,
  */
 int printf_va_922(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29694,8 +29694,8 @@ int printf_va_923(char const * restrict format, char *param0,
  */
 int printf_va_924(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29723,8 +29723,8 @@ int printf_va_925(char const * restrict format, char *param0,
  */
 int printf_va_926(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29752,8 +29752,8 @@ int printf_va_927(char const * restrict format, char *param0,
  */
 int printf_va_928(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29768,8 +29768,8 @@ int printf_va_928(char const * restrict format, int param0);
 int printf_va_929(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29797,8 +29797,8 @@ int printf_va_930(char const * restrict format, char *param0,
  */
 int printf_va_931(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29813,8 +29813,8 @@ int printf_va_931(char const * restrict format, int param0);
 int printf_va_932(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29842,8 +29842,8 @@ int printf_va_933(char const * restrict format, char *param0,
  */
 int printf_va_934(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29858,8 +29858,8 @@ int printf_va_934(char const * restrict format, int param0);
 int printf_va_935(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29887,8 +29887,8 @@ int printf_va_936(char const * restrict format, char *param0,
  */
 int printf_va_937(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29903,8 +29903,8 @@ int printf_va_937(char const * restrict format, int param0);
 int printf_va_938(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29932,8 +29932,8 @@ int printf_va_939(char const * restrict format, char *param0,
  */
 int printf_va_940(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29948,8 +29948,8 @@ int printf_va_940(char const * restrict format, int param0);
 int printf_va_941(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29979,8 +29979,8 @@ int printf_va_942(char const * restrict format, char *param0,
  */
 int printf_va_943(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -29995,8 +29995,8 @@ int printf_va_943(char const * restrict format, int param0);
 int printf_va_944(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30024,8 +30024,8 @@ int printf_va_945(char const * restrict format, char *param0,
  */
 int printf_va_946(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30040,8 +30040,8 @@ int printf_va_946(char const * restrict format, int param0);
 int printf_va_947(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30069,8 +30069,8 @@ int printf_va_948(char const * restrict format, char *param0,
  */
 int printf_va_949(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30085,9 +30085,9 @@ int printf_va_949(char const * restrict format, int param0);
 int printf_va_950(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30115,8 +30115,8 @@ int printf_va_951(char const * restrict format, char *param0,
  */
 int printf_va_952(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30131,8 +30131,8 @@ int printf_va_952(char const * restrict format, int param0);
 int printf_va_953(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30160,8 +30160,8 @@ int printf_va_954(char const * restrict format, char *param0,
  */
 int printf_va_955(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30176,9 +30176,9 @@ int printf_va_955(char const * restrict format, int param0);
 int printf_va_956(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30206,8 +30206,8 @@ int printf_va_957(char const * restrict format, char *param0,
  */
 int printf_va_958(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30222,9 +30222,9 @@ int printf_va_958(char const * restrict format, int param0);
 int printf_va_959(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30252,8 +30252,8 @@ int printf_va_960(char const * restrict format, char *param0,
  */
 int printf_va_961(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30281,8 +30281,8 @@ int printf_va_962(char const * restrict format, char *param0,
  */
 int printf_va_963(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30297,9 +30297,9 @@ int printf_va_963(char const * restrict format, int param0);
 int printf_va_964(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30327,8 +30327,8 @@ int printf_va_965(char const * restrict format, char *param0,
  */
 int printf_va_966(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30343,8 +30343,8 @@ int printf_va_966(char const * restrict format, int param0);
 int printf_va_967(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30372,8 +30372,8 @@ int printf_va_968(char const * restrict format, char *param0,
  */
 int printf_va_969(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30388,9 +30388,9 @@ int printf_va_969(char const * restrict format, int param0);
 int printf_va_970(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30418,8 +30418,8 @@ int printf_va_971(char const * restrict format, char *param0,
  */
 int printf_va_972(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30434,9 +30434,9 @@ int printf_va_972(char const * restrict format, int param0);
 int printf_va_973(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30464,8 +30464,8 @@ int printf_va_974(char const * restrict format, char *param0,
  */
 int printf_va_975(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30480,8 +30480,8 @@ int printf_va_975(char const * restrict format, int param0);
 int printf_va_976(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30761,8 +30761,8 @@ int printf_va_978(char const * restrict format);
  */
 int printf_va_979(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30790,8 +30790,8 @@ int printf_va_980(char const * restrict format, char *param0,
  */
 int printf_va_981(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30819,8 +30819,8 @@ int printf_va_982(char const * restrict format, char *param0,
  */
 int printf_va_983(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30848,8 +30848,8 @@ int printf_va_984(char const * restrict format, char *param0,
  */
 int printf_va_985(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30864,8 +30864,8 @@ int printf_va_985(char const * restrict format, int param0);
 int printf_va_986(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30893,8 +30893,8 @@ int printf_va_987(char const * restrict format, char *param0,
  */
 int printf_va_988(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30922,8 +30922,8 @@ int printf_va_989(char const * restrict format, char *param0,
  */
 int printf_va_990(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30951,8 +30951,8 @@ int printf_va_991(char const * restrict format, char *param0,
  */
 int printf_va_992(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30967,8 +30967,8 @@ int printf_va_992(char const * restrict format, int param0);
 int printf_va_993(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -30996,8 +30996,8 @@ int printf_va_994(char const * restrict format, char *param0,
  */
 int printf_va_995(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31012,8 +31012,8 @@ int printf_va_995(char const * restrict format, int param0);
 int printf_va_996(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31041,8 +31041,8 @@ int printf_va_997(char const * restrict format, char *param0,
  */
 int printf_va_998(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31057,8 +31057,8 @@ int printf_va_998(char const * restrict format, int param0);
 int printf_va_999(char const * restrict format, char *param0,
                   unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31086,8 +31086,8 @@ int printf_va_1000(char const * restrict format, char *param0,
  */
 int printf_va_1001(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31102,10 +31102,10 @@ int printf_va_1001(char const * restrict format, int param0);
 int printf_va_1002(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31135,8 +31135,8 @@ int printf_va_1003(char const * restrict format, char *param0,
  */
 int printf_va_1004(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31151,10 +31151,10 @@ int printf_va_1004(char const * restrict format, int param0);
 int printf_va_1005(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31186,8 +31186,8 @@ int printf_va_1006(char const * restrict format, char *param0,
  */
 int printf_va_1007(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31202,8 +31202,8 @@ int printf_va_1007(char const * restrict format, int param0);
 int printf_va_1008(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31220,10 +31220,10 @@ int printf_va_1009(char const * restrict format, char *param0,
                    unsigned int param1, unsigned long param2,
                    unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31255,8 +31255,8 @@ int printf_va_1010(char const * restrict format, char *param0,
  */
 int printf_va_1011(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31271,9 +31271,9 @@ int printf_va_1011(char const * restrict format, int param0);
 int printf_va_1012(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31302,8 +31302,8 @@ int printf_va_1013(char const * restrict format, char *param0,
  */
 int printf_va_1014(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31318,9 +31318,9 @@ int printf_va_1014(char const * restrict format, int param0);
 int printf_va_1015(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31349,8 +31349,8 @@ int printf_va_1016(char const * restrict format, char *param0,
  */
 int printf_va_1017(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31365,9 +31365,9 @@ int printf_va_1017(char const * restrict format, int param0);
 int printf_va_1018(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31396,8 +31396,8 @@ int printf_va_1019(char const * restrict format, char *param0,
  */
 int printf_va_1020(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31412,9 +31412,9 @@ int printf_va_1020(char const * restrict format, int param0);
 int printf_va_1021(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31443,8 +31443,8 @@ int printf_va_1022(char const * restrict format, char *param0,
  */
 int printf_va_1023(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31459,9 +31459,9 @@ int printf_va_1023(char const * restrict format, int param0);
 int printf_va_1024(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31720,8 +31720,8 @@ int printf_va_1026(char const * restrict format);
  */
 int printf_va_1027(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31749,8 +31749,8 @@ int printf_va_1028(char const * restrict format, char *param0,
  */
 int printf_va_1029(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31778,8 +31778,8 @@ int printf_va_1030(char const * restrict format, char *param0,
  */
 int printf_va_1031(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31807,8 +31807,8 @@ int printf_va_1032(char const * restrict format, char *param0,
  */
 int printf_va_1033(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31836,8 +31836,8 @@ int printf_va_1034(char const * restrict format, char *param0,
  */
 int printf_va_1035(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31865,8 +31865,8 @@ int printf_va_1036(char const * restrict format, char *param0,
  */
 int printf_va_1037(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31881,8 +31881,8 @@ int printf_va_1037(char const * restrict format, int param0);
 int printf_va_1038(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31910,8 +31910,8 @@ int printf_va_1039(char const * restrict format, char *param0,
  */
 int printf_va_1040(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31926,8 +31926,8 @@ int printf_va_1040(char const * restrict format, int param0);
 int printf_va_1041(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31955,8 +31955,8 @@ int printf_va_1042(char const * restrict format, char *param0,
  */
 int printf_va_1043(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -31971,8 +31971,8 @@ int printf_va_1043(char const * restrict format, int param0);
 int printf_va_1044(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32000,8 +32000,8 @@ int printf_va_1045(char const * restrict format, char *param0,
  */
 int printf_va_1046(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32016,8 +32016,8 @@ int printf_va_1046(char const * restrict format, int param0);
 int printf_va_1047(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32034,9 +32034,9 @@ int printf_va_1048(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2,
                    unsigned int param3, unsigned int param4);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32064,8 +32064,8 @@ int printf_va_1049(char const * restrict format, char *param0,
  */
 int printf_va_1050(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32080,8 +32080,8 @@ int printf_va_1050(char const * restrict format, int param0);
 int printf_va_1051(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32098,9 +32098,9 @@ int printf_va_1052(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2,
                    unsigned int param3, unsigned int param4);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32128,8 +32128,8 @@ int printf_va_1053(char const * restrict format, char *param0,
  */
 int printf_va_1054(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32144,8 +32144,8 @@ int printf_va_1054(char const * restrict format, int param0);
 int printf_va_1055(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32173,8 +32173,8 @@ int printf_va_1056(char const * restrict format, char *param0,
  */
 int printf_va_1057(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32189,8 +32189,8 @@ int printf_va_1057(char const * restrict format, int param0);
 int printf_va_1058(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32218,8 +32218,8 @@ int printf_va_1059(char const * restrict format, char *param0,
  */
 int printf_va_1060(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32234,9 +32234,9 @@ int printf_va_1060(char const * restrict format, int param0);
 int printf_va_1061(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32264,8 +32264,8 @@ int printf_va_1062(char const * restrict format, char *param0,
  */
 int printf_va_1063(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32280,8 +32280,8 @@ int printf_va_1063(char const * restrict format, int param0);
 int printf_va_1064(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32309,8 +32309,8 @@ int printf_va_1065(char const * restrict format, char *param0,
  */
 int printf_va_1066(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32325,9 +32325,9 @@ int printf_va_1066(char const * restrict format, int param0);
 int printf_va_1067(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32355,8 +32355,8 @@ int printf_va_1068(char const * restrict format, char *param0,
  */
 int printf_va_1069(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32371,9 +32371,9 @@ int printf_va_1069(char const * restrict format, int param0);
 int printf_va_1070(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32401,8 +32401,8 @@ int printf_va_1071(char const * restrict format, char *param0,
  */
 int printf_va_1072(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32417,8 +32417,8 @@ int printf_va_1072(char const * restrict format, int param0);
 int printf_va_1073(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32446,8 +32446,8 @@ int printf_va_1074(char const * restrict format, char *param0,
  */
 int printf_va_1075(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32462,8 +32462,8 @@ int printf_va_1075(char const * restrict format, int param0);
 int printf_va_1076(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32491,8 +32491,8 @@ int printf_va_1077(char const * restrict format, char *param0,
  */
 int printf_va_1078(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32507,8 +32507,8 @@ int printf_va_1078(char const * restrict format, int param0);
 int printf_va_1079(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32536,8 +32536,8 @@ int printf_va_1080(char const * restrict format, char *param0,
  */
 int printf_va_1081(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32552,9 +32552,9 @@ int printf_va_1081(char const * restrict format, int param0);
 int printf_va_1082(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32582,8 +32582,8 @@ int printf_va_1083(char const * restrict format, char *param0,
  */
 int printf_va_1084(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32598,9 +32598,9 @@ int printf_va_1084(char const * restrict format, int param0);
 int printf_va_1085(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32628,8 +32628,8 @@ int printf_va_1086(char const * restrict format, char *param0,
  */
 int printf_va_1087(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32644,8 +32644,8 @@ int printf_va_1087(char const * restrict format, int param0);
 int printf_va_1088(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -32978,8 +32978,8 @@ int printf_va_1090(char const * restrict format);
  */
 int printf_va_1091(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33007,8 +33007,8 @@ int printf_va_1092(char const * restrict format, char *param0,
  */
 int printf_va_1093(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33036,8 +33036,8 @@ int printf_va_1094(char const * restrict format, char *param0,
  */
 int printf_va_1095(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33065,8 +33065,8 @@ int printf_va_1096(char const * restrict format, char *param0,
  */
 int printf_va_1097(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33081,8 +33081,8 @@ int printf_va_1097(char const * restrict format, int param0);
 int printf_va_1098(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33110,8 +33110,8 @@ int printf_va_1099(char const * restrict format, char *param0,
  */
 int printf_va_1100(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33126,8 +33126,8 @@ int printf_va_1100(char const * restrict format, int param0);
 int printf_va_1101(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33155,8 +33155,8 @@ int printf_va_1102(char const * restrict format, char *param0,
  */
 int printf_va_1103(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33171,8 +33171,8 @@ int printf_va_1103(char const * restrict format, int param0);
 int printf_va_1104(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33200,8 +33200,8 @@ int printf_va_1105(char const * restrict format, char *param0,
  */
 int printf_va_1106(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33216,8 +33216,8 @@ int printf_va_1106(char const * restrict format, int param0);
 int printf_va_1107(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33245,8 +33245,8 @@ int printf_va_1108(char const * restrict format, char *param0,
  */
 int printf_va_1109(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33261,8 +33261,8 @@ int printf_va_1109(char const * restrict format, int param0);
 int printf_va_1110(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33290,8 +33290,8 @@ int printf_va_1111(char const * restrict format, char *param0,
  */
 int printf_va_1112(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33306,8 +33306,8 @@ int printf_va_1112(char const * restrict format, int param0);
 int printf_va_1113(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33322,10 +33322,10 @@ int printf_va_1113(char const * restrict format, char *param0,
 int printf_va_1114(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33355,8 +33355,8 @@ int printf_va_1115(char const * restrict format, char *param0,
  */
 int printf_va_1116(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33371,8 +33371,8 @@ int printf_va_1116(char const * restrict format, int param0);
 int printf_va_1117(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33387,10 +33387,10 @@ int printf_va_1117(char const * restrict format, char *param0,
 int printf_va_1118(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33420,8 +33420,8 @@ int printf_va_1119(char const * restrict format, char *param0,
  */
 int printf_va_1120(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33436,8 +33436,8 @@ int printf_va_1120(char const * restrict format, int param0);
 int printf_va_1121(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33465,8 +33465,8 @@ int printf_va_1122(char const * restrict format, char *param0,
  */
 int printf_va_1123(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33481,8 +33481,8 @@ int printf_va_1123(char const * restrict format, int param0);
 int printf_va_1124(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33510,8 +33510,8 @@ int printf_va_1125(char const * restrict format, char *param0,
  */
 int printf_va_1126(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33526,8 +33526,8 @@ int printf_va_1126(char const * restrict format, int param0);
 int printf_va_1127(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33542,10 +33542,10 @@ int printf_va_1127(char const * restrict format, char *param0,
 int printf_va_1128(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33575,8 +33575,8 @@ int printf_va_1129(char const * restrict format, char *param0,
  */
 int printf_va_1130(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33591,8 +33591,8 @@ int printf_va_1130(char const * restrict format, int param0);
 int printf_va_1131(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33607,10 +33607,10 @@ int printf_va_1131(char const * restrict format, char *param0,
 int printf_va_1132(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33640,8 +33640,8 @@ int printf_va_1133(char const * restrict format, char *param0,
  */
 int printf_va_1134(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33656,8 +33656,8 @@ int printf_va_1134(char const * restrict format, int param0);
 int printf_va_1135(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33685,8 +33685,8 @@ int printf_va_1136(char const * restrict format, char *param0,
  */
 int printf_va_1137(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33701,8 +33701,8 @@ int printf_va_1137(char const * restrict format, int param0);
 int printf_va_1138(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33719,10 +33719,10 @@ int printf_va_1139(char const * restrict format, char *param0,
                    unsigned int param1, unsigned long param2,
                    unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_wstring(param3);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_wstring(param3);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33754,8 +33754,8 @@ int printf_va_1140(char const * restrict format, char *param0,
  */
 int printf_va_1141(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33770,9 +33770,9 @@ int printf_va_1141(char const * restrict format, int param0);
 int printf_va_1142(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33801,8 +33801,8 @@ int printf_va_1143(char const * restrict format, char *param0,
  */
 int printf_va_1144(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -33817,9 +33817,9 @@ int printf_va_1144(char const * restrict format, int param0);
 int printf_va_1145(char const * restrict format, char *param0,
                    unsigned int param1, unsigned int param2);
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_wstring(param2);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34124,8 +34124,8 @@ int printf_va_1147(char const * restrict format);
  */
 int printf_va_1148(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34153,8 +34153,8 @@ int printf_va_1149(char const * restrict format, char *param0,
  */
 int printf_va_1150(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34182,8 +34182,8 @@ int printf_va_1151(char const * restrict format, char *param0,
  */
 int printf_va_1152(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34211,8 +34211,8 @@ int printf_va_1153(char const * restrict format, char *param0,
  */
 int printf_va_1154(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34240,8 +34240,8 @@ int printf_va_1155(char const * restrict format, char *param0,
  */
 int printf_va_1156(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34269,8 +34269,8 @@ int printf_va_1157(char const * restrict format, char *param0,
  */
 int printf_va_1158(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34298,8 +34298,8 @@ int printf_va_1159(char const * restrict format, char *param0,
  */
 int printf_va_1160(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34412,8 +34412,8 @@ int printf_va_1162(char const * restrict format);
  */
 int printf_va_1163(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34442,8 +34442,8 @@ int printf_va_1164(char const * restrict format, char *param0,
  */
 int printf_va_1165(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34472,8 +34472,8 @@ int printf_va_1166(char const * restrict format, char *param0,
  */
 int printf_va_1167(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34502,8 +34502,8 @@ int printf_va_1168(char const * restrict format, char *param0,
  */
 int printf_va_1169(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34532,8 +34532,8 @@ int printf_va_1170(char const * restrict format, char *param0,
  */
 int printf_va_1171(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34562,8 +34562,8 @@ int printf_va_1172(char const * restrict format, char *param0,
  */
 int printf_va_1173(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34592,8 +34592,8 @@ int printf_va_1174(char const * restrict format, char *param0,
  */
 int printf_va_1175(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34622,8 +34622,8 @@ int printf_va_1176(char const * restrict format, char *param0,
  */
 int printf_va_1177(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34639,8 +34639,8 @@ int printf_va_1177(char const * restrict format, int param0);
 int printf_va_1178(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34656,8 +34656,8 @@ int printf_va_1178(char const * restrict format, char *param0,
 int printf_va_1179(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34686,8 +34686,8 @@ int printf_va_1180(char const * restrict format, char *param0,
  */
 int printf_va_1181(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34703,8 +34703,8 @@ int printf_va_1181(char const * restrict format, int param0);
 int printf_va_1182(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34720,8 +34720,8 @@ int printf_va_1182(char const * restrict format, char *param0,
 int printf_va_1183(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34750,8 +34750,8 @@ int printf_va_1184(char const * restrict format, char *param0,
  */
 int printf_va_1185(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34767,8 +34767,8 @@ int printf_va_1185(char const * restrict format, int param0);
 int printf_va_1186(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34784,8 +34784,8 @@ int printf_va_1186(char const * restrict format, char *param0,
 int printf_va_1187(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34814,8 +34814,8 @@ int printf_va_1188(char const * restrict format, char *param0,
  */
 int printf_va_1189(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34831,8 +34831,8 @@ int printf_va_1189(char const * restrict format, int param0);
 int printf_va_1190(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34861,8 +34861,8 @@ int printf_va_1191(char const * restrict format, char *param0,
  */
 int printf_va_1192(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34878,8 +34878,8 @@ int printf_va_1192(char const * restrict format, int param0);
 int printf_va_1193(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34908,8 +34908,8 @@ int printf_va_1194(char const * restrict format, char *param0,
  */
 int printf_va_1195(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34925,8 +34925,8 @@ int printf_va_1195(char const * restrict format, int param0);
 int printf_va_1196(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34955,8 +34955,8 @@ int printf_va_1197(char const * restrict format, char *param0,
  */
 int printf_va_1198(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -34972,8 +34972,8 @@ int printf_va_1198(char const * restrict format, int param0);
 int printf_va_1199(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35002,8 +35002,8 @@ int printf_va_1200(char const * restrict format, char *param0,
  */
 int printf_va_1201(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35019,8 +35019,8 @@ int printf_va_1201(char const * restrict format, int param0);
 int printf_va_1202(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35049,8 +35049,8 @@ int printf_va_1203(char const * restrict format, char *param0,
  */
 int printf_va_1204(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35066,8 +35066,8 @@ int printf_va_1204(char const * restrict format, int param0);
 int printf_va_1205(char const * restrict format, char *param0,
                    unsigned int param1, int param2, unsigned int param3);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35376,8 +35376,8 @@ int printf_va_1207(char const * restrict format);
  */
 int printf_va_1208(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35405,8 +35405,8 @@ int printf_va_1209(char const * restrict format, char *param0,
  */
 int printf_va_1210(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35434,8 +35434,8 @@ int printf_va_1211(char const * restrict format, char *param0,
  */
 int printf_va_1212(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35463,8 +35463,8 @@ int printf_va_1213(char const * restrict format, char *param0,
  */
 int printf_va_1214(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35492,8 +35492,8 @@ int printf_va_1215(char const * restrict format, char *param0,
  */
 int printf_va_1216(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35521,8 +35521,8 @@ int printf_va_1217(char const * restrict format, char *param0,
  */
 int printf_va_1218(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35550,8 +35550,8 @@ int printf_va_1219(char const * restrict format, char *param0,
  */
 int printf_va_1220(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35579,8 +35579,8 @@ int printf_va_1221(char const * restrict format, char *param0,
  */
 int printf_va_1222(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35608,8 +35608,8 @@ int printf_va_1223(char const * restrict format, char *param0,
  */
 int printf_va_1224(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35667,8 +35667,8 @@ int printf_va_1227(char const * restrict format, int param0, int param1,
  */
 int printf_va_1228(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35726,8 +35726,8 @@ int printf_va_1231(char const * restrict format, int param0,
  */
 int printf_va_1232(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35785,8 +35785,8 @@ int printf_va_1235(char const * restrict format, int param0,
  */
 int printf_va_1236(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35844,8 +35844,8 @@ int printf_va_1239(char const * restrict format, int param0,
  */
 int printf_va_1240(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35903,8 +35903,8 @@ int printf_va_1243(char const * restrict format, int param0, int param1,
  */
 int printf_va_1244(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35932,8 +35932,8 @@ int printf_va_1245(char const * restrict format, char *param0,
  */
 int printf_va_1246(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -35991,8 +35991,8 @@ int printf_va_1249(char const * restrict format, int param0, int param1,
  */
 int printf_va_1250(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36035,8 +36035,8 @@ int printf_va_1252(char const * restrict format, int param0, int param1,
  */
 int printf_va_1253(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36079,8 +36079,8 @@ int printf_va_1255(char const * restrict format, int param0, int param1,
  */
 int printf_va_1256(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36439,8 +36439,8 @@ int printf_va_1259(char const * restrict format);
  */
 int printf_va_1260(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36468,8 +36468,8 @@ int printf_va_1261(char const * restrict format, char *param0,
  */
 int printf_va_1262(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36497,8 +36497,8 @@ int printf_va_1263(char const * restrict format, char *param0,
  */
 int printf_va_1264(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36526,8 +36526,8 @@ int printf_va_1265(char const * restrict format, char *param0,
  */
 int printf_va_1266(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36555,8 +36555,8 @@ int printf_va_1267(char const * restrict format, char *param0,
  */
 int printf_va_1268(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36584,8 +36584,8 @@ int printf_va_1269(char const * restrict format, char *param0,
  */
 int printf_va_1270(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36613,8 +36613,8 @@ int printf_va_1271(char const * restrict format, char *param0,
  */
 int printf_va_1272(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36642,8 +36642,8 @@ int printf_va_1273(char const * restrict format, char *param0,
  */
 int printf_va_1274(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36671,8 +36671,8 @@ int printf_va_1275(char const * restrict format, char *param0,
  */
 int printf_va_1276(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36730,8 +36730,8 @@ int printf_va_1279(char const * restrict format, int param0, int param1,
  */
 int printf_va_1280(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36789,8 +36789,8 @@ int printf_va_1283(char const * restrict format, int param0,
  */
 int printf_va_1284(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36848,8 +36848,8 @@ int printf_va_1287(char const * restrict format, int param0,
  */
 int printf_va_1288(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36907,8 +36907,8 @@ int printf_va_1291(char const * restrict format, int param0,
  */
 int printf_va_1292(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -36951,8 +36951,8 @@ int printf_va_1294(char const * restrict format, int param0, int param1,
  */
 int printf_va_1295(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37025,8 +37025,8 @@ int printf_va_1299(char const * restrict format, int param0, int param1,
  */
 int printf_va_1300(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37054,8 +37054,8 @@ int printf_va_1301(char const * restrict format, char *param0,
  */
 int printf_va_1302(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37098,8 +37098,8 @@ int printf_va_1304(char const * restrict format, int param0, int param1,
  */
 int printf_va_1305(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37142,8 +37142,8 @@ int printf_va_1307(char const * restrict format, int param0, int param1,
  */
 int printf_va_1308(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37201,8 +37201,8 @@ int printf_va_1311(char const * restrict format, int param0, int param1,
  */
 int printf_va_1312(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37609,8 +37609,8 @@ int printf_va_1316(char const * restrict format);
  */
 int printf_va_1317(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37638,8 +37638,8 @@ int printf_va_1318(char const * restrict format, char *param0,
  */
 int printf_va_1319(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37667,8 +37667,8 @@ int printf_va_1320(char const * restrict format, char *param0,
  */
 int printf_va_1321(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37696,8 +37696,8 @@ int printf_va_1322(char const * restrict format, char *param0,
  */
 int printf_va_1323(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37754,8 +37754,8 @@ int printf_va_1326(char const * restrict format, int param0, int param1,
  */
 int printf_va_1327(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37813,8 +37813,8 @@ int printf_va_1330(char const * restrict format, int param0, int param1,
  */
 int printf_va_1331(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37872,8 +37872,8 @@ int printf_va_1334(char const * restrict format, int param0, int param1,
  */
 int printf_va_1335(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -37916,8 +37916,8 @@ int printf_va_1337(char const * restrict format, int param0, int param1,
  */
 int printf_va_1338(char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/semver/.frama-c/semver.parse/framac.ast b/semver/.frama-c/semver.parse/framac.ast
index 07054308c6694eb5640502110cc1d18acf804ad9..7f41f35f3e061b9487e6fe7a1e59fe4a38e34612 100644
--- a/semver/.frama-c/semver.parse/framac.ast
+++ b/semver/.frama-c/semver.parse/framac.ast
@@ -574,8 +574,8 @@ void semver_free(semver_t *x)
  */
 int sprintf_va_1(char * restrict s, char const * restrict format, int param0);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: *(format + (0 ..))), (indirect: param1),
@@ -595,9 +595,9 @@ static void concat_num(char *str, int x, char *sep)
   return;
 }
 
-/*@ requires valid_read_string(format);
+/*@ requires valid_read_string(param0);
     requires valid_read_string(param1);
-    requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, *(s + (0 ..));
     assigns \result
       \from (indirect: *(format + (0 ..))), (indirect: *(param1 + (0 ..))),
@@ -799,8 +799,8 @@ static void suite_runner(struct test_case *cases, int len,
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -847,8 +847,8 @@ void test_parse_simple(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -893,8 +893,8 @@ void test_parse_major(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -939,8 +939,8 @@ void test_parse_minor(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1011,8 +1011,8 @@ void test_parse_prerelease(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1083,8 +1083,8 @@ void test_parse_metadata(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1167,8 +1167,8 @@ void test_parse_prerelerease_metadata(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1215,8 +1215,8 @@ void test_compare(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1303,8 +1303,8 @@ void test_compare_full(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1353,8 +1353,8 @@ void test_compare_spec(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1403,8 +1403,8 @@ void test_compare_gt(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1447,8 +1447,8 @@ void test_compare_lt(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1493,8 +1493,8 @@ void test_compare_eq(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1539,8 +1539,8 @@ void test_compare_neq(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1585,8 +1585,8 @@ void test_compare_gte(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1631,8 +1631,8 @@ void test_compare_lte(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -1957,8 +1957,8 @@ void test_satisfies(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2016,8 +2016,8 @@ void test_render(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2089,8 +2089,8 @@ void test_numeric(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2149,8 +2149,8 @@ void test_bump(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2200,8 +2200,8 @@ void test_bump_minor(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2251,8 +2251,8 @@ void test_bump_patch(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2308,8 +2308,8 @@ void test_free(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
@@ -2352,8 +2352,8 @@ void test_valid_chars(void)
   return;
 }
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/solitaire/.frama-c/solitaire.parse/framac.ast b/solitaire/.frama-c/solitaire.parse/framac.ast
index b2a8d610738648dcc56a2d3120a8b0ed9068dfd9..5ac5674aab445ecd2fd03ff99f46bb57771814e3 100644
--- a/solitaire/.frama-c/solitaire.parse/framac.ast
+++ b/solitaire/.frama-c/solitaire.parse/framac.ast
@@ -414,8 +414,8 @@ static char encrypt_char(char char_in)
  */
 int printf_va_3(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),
diff --git a/tweetnacl-usable/.frama-c/tweetnacl-usable.parse/framac.ast b/tweetnacl-usable/.frama-c/tweetnacl-usable.parse/framac.ast
index fdd200e117bb64f74c55e032343721a156d510fb..90426814d43a6d564a5038597a5d9498f6663edd 100644
--- a/tweetnacl-usable/.frama-c/tweetnacl-usable.parse/framac.ast
+++ b/tweetnacl-usable/.frama-c/tweetnacl-usable.parse/framac.ast
@@ -271,8 +271,8 @@ int printf_va_10(char const * restrict format, int param0);
  */
 int printf_va_11(char const * restrict format);
 
-/*@ requires valid_read_string(format);
-    requires valid_read_string(param0);
+/*@ requires valid_read_string(param0);
+    requires valid_read_string(format);
     assigns \result, __fc_stdout->__fc_FILE_data;
     assigns \result
       \from (indirect: __fc_stdout->__fc_FILE_id),