Hi Shiyu,
On 24/09/2013 22:06, Shiyu Dong wrote:
One more question: does KLEE has any way to limit to the number of paths to
explore? From the --help command the only possible option I see is
"-stop-after-n-tests=<uint>" because I assume each test case corresponds to
one path by observing the test results that I already have. Is that a good
assumption?
At some level, yes, but this ignores the partial paths that have not
resulted in a test case yet. Also, to avoid excessive test case
generation, it is often a good idea to use the flag
-only-output-states-covering-new, which only generates a test case when
new code is covered (note that the command line discussed before
includes this flag).
Are there better flags to use?
If I understand correctly, what you want is actually -max-forks=<uint>.
Best,
Cristian
_______________________________________________
klee-dev mailing list
[email protected]
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev