klee icon indicating copy to clipboard operation
klee copied to clipboard

Should `undef` be treated as zero?

Open delcypher opened this issue 8 years ago • 4 comments

In Executor::evalConstant(const Constant *c) undef is treated as zero. We might want to provide an option to introduce symbolic data instead if this happens.

delcypher avatar Sep 30 '16 05:09 delcypher

@delcypher This is very good point. Do we have other code locations where a similar behavior would be appropriate as well?

MartinNowack avatar Oct 01 '16 20:10 MartinNowack

@MartinNowack I'm not sure. This is just one I stumbled across recently which I thought seemed a little odd.

delcypher avatar Oct 04 '16 10:10 delcypher

@delcypher We can also have this option for Executor::Alloc the call of the initializeToRandom() after allocating memory (Same for globals.). This would allow us to find uninitialized memory bugs.

MartinNowack avatar Oct 12 '16 13:10 MartinNowack

Indeed, I think this would be a nice extension to KLEE. I would guard all these calls with the same option.

ccadar avatar Oct 12 '16 16:10 ccadar