Hi Dingbao, AFAIK, If you wanna make a memory location M symbolic, the only public API is klee_make_symbolic(FIRST_ADDR(M), SIZE(M), "specified_name").
If you simply make pointer P symbolic, that's exactly the same as a normal variable, i.e., klee_make_symbolic(&P, sizeof(P), "p"), which means that P's value is uncertain. However if you also need to deference it(in most of the cases you do), you've to make the pointed area symbolic rather than P itself; also notice that KLEE cannot make symbolic if the length of the pointed area is uncertain. Thanks and Regards, Hongxu On Sat, Dec 20, 2014 at 9:58 AM, Dingbao Xie <[email protected]> wrote: > Hi, everyone. > I want to test functions of a program one by one with klee. > It's easy to change the entry function of a program when using klee > to execute it. > But I don't know how to make the arguments of the function to be > symbolic and the type of an argument may be pointer, struct etc. > > What's the easiest way to achieve that? > Thanks in advance. > > > > > > -- > Dingbao Xie > > _______________________________________________ > klee-dev mailing list > [email protected] > https://mailman.ic.ac.uk/mailman/listinfo/klee-dev > >
_______________________________________________ klee-dev mailing list [email protected] https://mailman.ic.ac.uk/mailman/listinfo/klee-dev
