Hi, KLEE does generate symbolic expressions to check for out-of-bounds memory access. If you are looking for something specific, you may get more answers if you explain it in a few sentences, rather than expect people to read the whole paper.
Best, Paul On 14 Jun 2013, at 08:31, Eric Lu <[email protected]> wrote: > Hello, > > I want to generate pointer/array access bounds expressions with KLEE in > LLVM. I am new to symbolic execution and KLEE, and I am not sure if some > body have done this before? > > What I need is something like symbolic execution in [1]， is it possible to > implement [1] based KLEE? > > Or are there some better ways to do this? Any advice is welcome! > > > [1] Symbolic Bounds Analysis of Pointers, Array Indices, and Accessed > Memory Regions > > > Thanks! > > Eric > _______________________________________________ > klee-dev mailing list > [email protected] > https://mailman.ic.ac.uk/mailman/listinfo/klee-dev
_______________________________________________ klee-dev mailing list [email protected] https://mailman.ic.ac.uk/mailman/listinfo/klee-dev
