Re: [klee-dev] Adding Symbolic Arrays and Solver's Data structure to map

2015-04-28 Thread Anitha B Gollamudi
To summarize: I guess what I am asking is - In klee source code, is there a way to find if "Array" and "ConstantExpr" alias each other... (i.e an array and a pointer expression) On 28 April 2015 at 21:49, Anitha B Gollamudi wrote: > Hopefully someone can answer this.

[klee-dev] Adding Symbolic Arrays and Solver's Data structure to map

2015-04-28 Thread Anitha B Gollamudi
Hopefully someone can answer this. I am experimenting klee with special function handling. I'll try to pose a simple question (please feel free to ask me further question if it is unclear). Lets say we have a simple testcase as follows where myspecialfunc(char *c) is handled in SpecialFunctionHand

Re: [klee-dev] Printing Expression during debugging

2015-04-28 Thread Anitha B Gollamudi
On 28 April 2015 at 21:06, Eric Rizzi wrote: > e.get().dump() should normally do the trick assuming e is of type > ref. If e is just an expr, then dump() I think is what does it. Awesome. e->dump() works. Thanks Eric! > > On Apr 28, 2015 6:19 PM, "Anitha B Gollamudi

[klee-dev] Printing Expression during debugging

2015-04-28 Thread Anitha B Gollamudi
Hi, Is there some tip on how to print the entire expression when using gdb? For instance I would like to see the entire expression 'e' (all its children and grandchildren...). As of now I am (painfully) - casting the expression and getting left/right child - recursively. Thanks -- Anitha ___

[klee-dev] Klee and Kleaver interface

2015-04-17 Thread Anitha B Gollamudi
Hi, I am debugging klee to understand the control flow of constraint generation and solving there of. I have 2-3 basic questions which can help me cut short the debugging time. 1. So I created a debug build of klee using --with-runtime=Debug+Asserts. I expected the entire debug build of KLEE to b

[klee-dev] Symbolic pointers and memory allocation

2015-04-07 Thread Anitha B Gollamudi
Hi, When I try a simple program like the below, Klee gives me the error "memory: invalid pointer make_symbolic". The snippet is part of a larger testcase where I don't know the amount of memory that I will allocate to 'c'. trying to test values of "c". Why is Klee unhappy? How to fix without usi

Re: [klee-dev] String Analysis with KLEE

2015-03-25 Thread Anitha B Gollamudi
On 25 March 2015 at 16:51, Anitha B Gollamudi wrote: > Hi, > > I would like to use KLEE for string analysis (for analyzing SQL > injection vulnerabilities). Here are my concerns: > > 1. Can KLEE handle arbitrary length strings? Essentially, can I make a > 'char *'

[klee-dev] String Analysis with KLEE

2015-03-25 Thread Anitha B Gollamudi
Hi, I would like to use KLEE for string analysis (for analyzing SQL injection vulnerabilities). Here are my concerns: 1. Can KLEE handle arbitrary length strings? Essentially, can I make a 'char *' symbolic with specifying length? 2. Since STP cannot handle string constraints (correct me here!),

Re: [klee-dev] Build Error on Mac OS X 10.10.2

2015-03-21 Thread Anitha B Gollamudi
Got this resolved using export MACOSX_DEPLOYMENT_TARGET=10.10. On 21 March 2015 at 13:03, Anitha B Gollamudi wrote: > Hi, > > Trying to build LLVM 2.9 on Mac OS X Yosemite 10.10.2 while building > KLEE. Got this famous error. > > ld: -rpath can only be used when targeting Mac

[klee-dev] Build Error on Mac OS X 10.10.2

2015-03-21 Thread Anitha B Gollamudi
Hi, Trying to build LLVM 2.9 on Mac OS X Yosemite 10.10.2 while building KLEE. Got this famous error. ld: -rpath can only be used when targeting Mac OS X 10.5 or later I tried the suggestion from homebrew website. Still no use. Any quick fix? https://github.com/Homebrew/homebrew-versions/issue