Take a look at your favorite debugger. Ask the question - how does it figure the call tree?
When KLEE writes out the test case, walk the call tree in the same fashion as the debugger until you get to main. You probably need a debug version of the code to get the symbols needed to play this game, but it should work. Use the line numbers to identify the branch locations, there may not be symbols at those locations Dave Lightstone
_______________________________________________ klee-dev mailing list [email protected] https://mailman.ic.ac.uk/mailman/listinfo/klee-dev
