[klee-dev] How should the function parameter be symbolised if the function parameter is a file type?

2022-01-17 Thread rongze xv
Hi, I am confused about How should the function parameter be symbolised if the function parameter is a file type. For example, I use KLEE to test a function ok_png ok_png_read(FILE *file, ok_png_decode_flags decode_flags), the test code written is as follows: int main(int argc, char **argv){

[klee-dev] How can I get the testcase content in real-time?

2021-12-08 Thread rongze xv
Hi klee-dev members, If I understand correctly, the state of KLEE should represent the currently running path? If this is the case, KLEE will generate a test case for each state. I hope that when KLEE generates each test case, its test case content will be output in real-time. Which part of the

[klee-dev] How to use KLEE to get the stack information of each test case?

2021-11-02 Thread rongze xv
Hi klee-dev members, I would like to ask: Is it possible to get the stack trace or the execution path of each test case (similar to the stack information in the xx.ptr.err file) during the process of generating test cases in KLEE? (If I need to modify the code, which part should I start with?)

[klee-dev] How to use KLEE to get the execution coverage of each test case?

2021-10-31 Thread rongze xv
Hi klee-dev members, I would like to ask how to use KLEE to get the execution coverage of each test case instead of the overall coverage of all test cases run this time? If you can reply to me in your spare time, thank you very much!! Sincerely, Xu Rongze

[klee-dev] About klee's detection problems in real software

2020-09-15 Thread rongze xv
Hi all, I am a graduate student, my name is Xu Rongze. I recently read your paper "KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs", and learn how to use KLEE. I saw the tutorial on the official website: "Testing Coreutils" clearly stated "One of the