1

Klee uses STP as its constraint solver, but theoretically it is possible to change its solver. STP does not allow floating point operations. If we decide to replace STP with another constraint solver, say z3, would klee be able to generate floating point constraints?

The flow is: C code -> llvm bitcode -> klee -> stp clauses -> klee -> output

If klee gets floating point llvm instructions, is it able to interpret them? Does it generate fp constraints in smt language, that stp is not able to handle them, or it doesn't generate fp constraints at all?

Any reference for your answer would be appreciated.

Madrugada
  • 1,261
  • 8
  • 24
  • 44
  • Multi SMT solver support including Z3 is already added in KLEE. See here: http://srg.doc.ic.ac.uk/projects/klee-multisolver/ – user May 12 '15 at 16:29
  • I know about multi solver, my question was strictly on the KLEE ! Multi-solver is another question: does it take Z3 with floating point or without! – Madrugada May 12 '15 at 19:13

1 Answers1

1

This link contains a fork of KLEE with floating point support. No idea how mature is it, though.

OrenIshShalom
  • 5,974
  • 9
  • 37
  • 87
arrowd
  • 33,231
  • 8
  • 79
  • 110