[klee-dev] Question about building KLEE with other external libraries

2013-03-06 Thread Wei-Fan
Hello Sir, My name is Wei-Fan, and I am currently a graduate student at University of Utah. I currently tried to build KLEE with some other external libraries. I tried to configure KLEE by: ./configure --libs=-lgmp -lmpfr of ./configure --with-libs=-lgmp -lmpfr But they didn't

Re: [klee-dev] rationale behind the parameters used in the KLEE OSDI paper

2013-03-06 Thread Cristian Cadar
Hi Lei, Thank you for your detailed instruction. Now we do like that. And, another question, I think there are actually only 88 stand-alone utilities in coreutils, unless considering false or test/[ as stand-alone. I skipped dir, vdir, ginstall, groups, sha*sum, false, and only test one of the

Re: [klee-dev] how to compile busybox-1.4.2 to be a .bc file correctly?

2013-03-06 Thread Cristian Cadar
Hi Yi, We used this sequence: mkdir obj-klee make -w O=obj-klee defconfig cd obj-klee make CC=klee-gcc LD=llvm-ld --disable-opt AR=llvm-ar SKIP_STRIP=y V=1 ln -s busybox_unstripped.bc toolname (for each tool you want to run) You might need to adjust this a bit (I noticed that on my current

Re: [klee-dev] silently concretize float expression to value

2013-03-06 Thread Cristian Cadar
I want to work with examples that has float. Can KLEE deal with this? KLEE cannot currently handle symbolic floating point expressions. A fork KLEE called KLEE-FP can handle symbolic floating point expressions. See http://www.pcc.me.uk/~peter/klee-fp/ Just a quick clarification: KLEE-FP has

Re: [klee-dev] how to compile busybox-1.4.2 to be a .bc file correctly?

2013-03-06 Thread Jian Liu
Hi Cristian, Thanks so much. YI and Yi: please try it and redo your experiments. Jian LIU email to: gjk@gmail.com 2013/3/7 Cristian Cadar c.ca...@imperial.ac.uk Hi Yi, We used this sequence: mkdir obj-klee make -w O=obj-klee defconfig cd obj-klee make

Re: [klee-dev] using klee with Siemens Benchmarks

2013-03-06 Thread Urmas Repinski
Hello. Yes. So KLEE takes into account only the coverage, if all paths are covered, but does not take into account entire design structure. The errors provided by siemens benchmarks are in the operators (+ - -, - , etc) and in numbers (2 - 3, 70 - 80), and with klee inputs even if

Re: [klee-dev] using klee with Siemens Benchmarks

2013-03-06 Thread DAVID LIGHTSTONE
At one time I was playing around with KLEE. The goal was to see if MCDC coverage was possible. It was not. By coincidence I discovered CIL a C language program transformation tool. Try (1) transform the source using CIL (2) generate test cases using KLEE operating upon the transformed source (3)