I believe that CBMC can only represent allocations of size 2**(64-number-object-bits). And yet ``` int *p = malloc(SIZE_MAX); assert(p); ``` succeeds. This should either return NULL, or block with an assume that the input to malloc is a representable size.