Hi,

Can someone please help me understand some of the KLEE forking flags:

1. max-forks=n

My understanding is that KLEE will allow the code being tested to fork n
times, resulting in n+1 paths explored. I believe that KLEE will halt at
any additional branching statements and find an input that reaches the
statement. This is instead of arbitrarily picking a branch and solving the
constraints at true path-end.


2. max-static-fork-pct and max-static-cpfork-pct

I'm having trouble understanding these two.




Thank you,
Daniel Schwartz
_______________________________________________
klee-dev mailing list
[email protected]
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev

Reply via email to