Hi,
I tried the latest version (1.2.0) of KLEE using docker. I used the
following program:
#include<stdio.h>
#include "../../klee_src/include/klee/klee.h"
int main(){
int a;
int x;
klee_make_symbolic(&a, sizeof(a), "a");
klee_make_symbolic(&x, sizeof(x), "x");
a = x;
if(x < 0){
a = 1;
}
}
I compiled the above program using clang:
clang -emit-llvm -c -o simple.bc simple.c
I ran klee using the command:
klee simple.bc
But the output from KLEE indicated that it completed only one path whereas
the program clearly has two paths. Can anyone please explain why this
happened ?
--
Thanks and Regards,
Sumit
_______________________________________________
klee-dev mailing list
[email protected]
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev