Stack Overflow
Stack Overflow

Questions tagged [klee]

KLEE: Unassisted and Automatic Generation of High-Coverage, is a symbolic virtual machine built on top of the LLVM compiler infrastructure

KLEE is a symbolic execution tool, capable of automatically generating tests that achieve high coverage on a diverse set of complex and environmentally-intensive programs, KLEE could also be used as a bug finding too.

Home page

KLEE publication

64 questions
1
vote
2 answers

KLEE: ERROR: unknown intrinsic: llvm.objectsize.i64.p0i8

I encountered the error "KLEE: ERROR: unknown intrinsic: llvm.objectsize.i64.p0i8" when running KLEE on a program. I know that I should add support for it in the IntrinsicCleaner pass. But I failed to find the documentation for this intrinsic…
Dingbao Xie
  • 716
  • 9
  • 21
1
vote
1 answer

KLEE WARNING undefined function

I've compiled Wireshark into LLVM then I proceeded to link against some libraries which I also compiled into LLVM. The libraries I linked were libwsutil, libz and libpcap. However KLEE still gives me a warning for undefined function for libpcap. I…
drum
  • 5,416
  • 7
  • 57
  • 91
1
vote
1 answer

/bin/sh: 1: /home/qingjinlyc/IDEs/llvm-gcc-4.2-2.9-i686-linux: Permission denied

When building klee, I need build uclibc for klee first. But something went wrong when I tried to make uclibc, the error info are: qingjinlyc@qingjinlyc:~/IDEs/klee-uclibc-0.02-i386$ make /bin/sh: 1: /home/qingjinlyc/IDEs/llvm-gcc-4.2-2.9-i686-linux:…
qingjinlyc
  • 175
  • 2
  • 12
1
vote
1 answer

Which kind of representation can be '\r\x00\x00\x00' (if usually I have hexadecimal code:'\x0\x00\x00\x03')

I'm using a program (klee) that give me tests of c code. I need to use the results in my program. It is not readable information, but some of the solutions are hexadecimal data with the next format: '\x0e\x00\x00\x00' I have already asked about how…
romi
  • 161
  • 3
  • 14
1
vote
1 answer

LLVM + KLEE: 'main' function not found in module

Im trying to set up Klee for a project and Im running into difficulties when testing coreutils as per http://klee.llvm.org/TestingCoreutils.html src$ $KLEE cut.bc 'main' function not found in module. *** glibc detected ***…
Filip
  • 2,285
  • 1
  • 19
  • 24
0
votes
0 answers

How to solve "ptrace operation not permitted"?

I am getting the following message: Could not attach to process. If your uid matches the uid of the target process, check the setting of /proc/sys/kernel/yama/ptrace_scope, or try again as the root user. For more details, see…
Arpita Dutta
  • 23
  • 4
0
votes
0 answers

What is the difference between branch and fork function in Executor.cpp on KLEE?

When KLEE starts, the core process calls run function in Executor.cpp, and then program executes the state, forks the state, and select the state to be executed. In this case, there are two function like fork strategy: void…
JaeHyeok
  • 1
  • 2
0
votes
1 answer

How do I create a testcase that targets a specified branch?

I try to "dynamic symbolic execution" with klee. How do I create a testcase that targets a specified branch? int a = 0; klee_make_symbolic(&a, sizeof(a), "a"); if (a == 0) ... // I want to touch only this branch else if (a > 0) ... else …
bam
  • 5
  • 1
0
votes
1 answer

I am unable to get back the file I saved after exiting from the Klee

I am researching symbolic execution based on the klee tool. I am running klee via docker. I create a directory and save c program file in that directory. But after exiting from klee, and again If I try to enter back into the klee, it shows that…
Julie
  • 1
  • 5
0
votes
1 answer

How to extend the klee (llvm) build system?

Context I am working on a klee (http://klee.llvm.org) fork and want to clean up our repository to separate our stuff from the "canonical" klee code. Anyway, I'm having trouble understanding/extending the build system. Problem The directory structure…
bitmask
  • 32,434
  • 14
  • 99
  • 159
0
votes
1 answer

How to use llvm target initialize function

My Host System : Default target: x86_64-unknown-linux-gnu : Host CPU: skylake LLVM/Clang built with LLVM_TARGETS_TO_BUILD=all option. How to Use another target's Initialize Function in My code? I modifying klee (symbolic execution tool) to run…
bam
  • 5
  • 1
0
votes
1 answer

KLEE: Appending variables with different alignment need to be linked

I am attempting to use KLEE with some Swift code. For the sake of simplicity, I've created a basic hello world file. I am able to compile the Swift file (that uses klee_make_symbolic) successfully but I run into issues when I attempt to actually run…
rcobelli
  • 199
  • 1
  • 2
  • 14
0
votes
1 answer

How to use the max-time tag with klee

I'm trying to run klee on a compiled bytecode version of the coreutils, somewhat replicating the experiment that klee did a while back. I'm having some trouble figuring out how to use the --max-time flag. When I run this command, it takes around 3…
Shaheen Cullen-Baratloo
  • 1
0
votes
1 answer

Configure Error on KLEE Docker: C compiler cannot create executables

I'm trying to build Coreutils with LLVM, using klee docker based on step 3 on https://klee.github.io/tutorials/testing-coreutils/. But I found a problem on running: CC=wllvm ../configure --disable-nls CFLAGS="-g -O1 -Xclang -disable-llvm-passes…
Nann
  • 1
  • 4
0
votes
1 answer

C compiler cannot create executables during build of Coreutils with LLVM

I am looking for some assistance in figuring out the solution to an error that pops up during the configure command of Coreutils with llvm. I use the command: CC=wllvm ../configure --disable-nls CFLAGS="-g -O1 -Xclang -disable-llvm-passes…
Abhinath Kumar
  • 5
  • 5
1 2
3
4 5