Programming problem for ACSL