Fix binary operator bug in Z3Solver