Ben Spencer

In `cvc4result` for this example I see a solution for `SYM_TARGET_0__TOSTRING` (as mentioned in the condition) but not for a full symbolic object, so there is a crash when trying...

I get a segfault while printing a symbolic condition.

See `test_pageload_command_timeout_blocking_js` in `server.py`

String -> int coercions can choose inappropriate strings.

1

See new test case in 647ad24a. It seems that the solver considers the coercion of all strings to be

Our utility function isImmediatelyUnexplored returns true for nodes of types TraceUnexplored, TraceUnexploredUnsat, TraceUnexploredUnsolvable and TraceUnexploredMissed. In some places where this is used, we only really want to test if the...

Direct use of symbolic boolean values.

1

In some cases there can be an implied branch with no source-code branch, which we will miss. See [_checkbox-direct-use-of-checked.html](https://github.com/cs-au-dk/Artemis/blob/5673da290672c71a1818e7807ce7ff5417be2243/artemis-code/tests/system/fixtures/concolic/_checkbox-direct-use-of-checked.html) from 5673da29, which should match the behaviour of [checkbox.html](https://github.com/cs-au-dk/Artemis/blob/5673da290672c71a1818e7807ce7ff5417be2243/artemis-code/tests/system/fixtures/concolic/checkbox.html) but does...

I am getting a segfault from the ExpressionPrinter when it visits the child node of a StringLength expression. The StringExpression child does not seem to be a valid object, causing...

Silent crashes when WebKit is loading pages.

3

When loading some pages I am seeing getting unexplained crashes while WebKit is running. There is no segfault, core dump, error message, etc., Artemis just ends immediately.

I get a segfault from the dynamic_cast used in TraceVisitor::isImmediatelyUnexplored() when checking the children of branch nodes in the DepthFirstSearch of the execution tree. Running the concolic mode on the...

In certain examples from the concolic sites testing we have seen some divergent merges. This is when the newly recorded trace does not match the expected path in the execution...