Hi,

I’m wondering whether klee generate constraints when a concrete value is 
written to symbolic position? I tried a toy program and it seemed klee doesn’t. 
Specifically, I added a `buf[1] = ‘9’ before the password check in 
check_password(). But I only get constraint: (Eq 104 (Read w8 0 A-data)) due to 
short-circuit evaluation. What I would like to see are two constriants: (Eq 104 
(Read w8 0 A-data)) and (Eq 57 (Read w8 1 A-data))

Is there an easy way to add this feature? Could you give me some hint on which 
file to modify?

Best,
Weiqi
_______________________________________________
klee-dev mailing list
klee-dev@imperial.ac.uk
https://mailman.ic.ac.uk/mailman/listinfo/klee-dev

Reply via email to