Do not turn trivially diverging loops into assume(false) (#3223)

CBMC's symbolic execution by default turns `while(true) {}` loops into
`assume(false)` to counter trivial non-termination of symbolic
execution. When unwinding assertions are enabled, however, we should
report the non-termination of such loops.

Resolves: #2909

kani-driver/src/call_cbmc.rs

@@ -182,7 +182,9 @@ impl KaniSession {
  }
 
  if self.args.checks.unwinding_on() {
+ // TODO: With CBMC v6 the below can be removed as those are defaults.
  args.push("--unwinding-assertions".into());
+ args.push("--no-self-loops-to-assumptions".into());
  }
 
  if self.args.extra_pointer_checks {

tests/expected/function-contract/diverging_loop.expected

@@ -0,0 +1,3 @@
+Failed Checks: unwinding assertion loop 0
+
+VERIFICATION:- FAILED

tests/expected/function-contract/diverging_loop.rs

@@ -0,0 +1,15 @@
+// Copyright Kani Contributors
+// SPDX-License-Identifier: Apache-2.0 OR MIT
+// kani-flags: -Zfunction-contracts
+
+#[kani::ensures(|result : &i32| *result == 1)]
+fn foo() -> i32 {
+ loop {}
+ 2
+}
+
+#[kani::proof_for_contract(foo)]
+#[kani::unwind(1)]
+fn check_foo() {
+ let _ = foo();
+}