The current codebase does not have this option, but adding such code should be easy. One option would be to change SpecialFunctionHandler::handleMalloc.

Best,
Cristian

On 15/07/15 16:04, Sven wrote:
hey there,

Can klee generate path for failed mallocs?

I am running:

#include <stdlib.h>

int main(int argc, char **argv) {
         char *c = malloc(6*sizeof(char));
         if(NULL == c) {
                 return 1;
         }
         return 0;
}

I expect 2 pathes, one where malloc fails, and thereby returns NULL, and
one where malloc is successful. However, I am getting just one path. Is
this a limitation of klee or am I doing something wrong?

Cheers,
Sven



_______________________________________________
klee-dev mailing list
[email protected]
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev


_______________________________________________
klee-dev mailing list
[email protected]
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev

Reply via email to