Questions tagged [klee]

KLEE: Unassisted and Automatic Generation of High-Coverage, is a symbolic virtual machine built on top of the LLVM compiler infrastructure

KLEE is a symbolic execution tool, capable of automatically generating tests that achieve high coverage on a diverse set of complex and environmentally-intensive programs, KLEE could also be used as a bug finding too.

Home page

KLEE publication

64 questions
-1
votes
2 answers

KLEE configuration error

I am trying to install KLEE by following the step at: http://klee.github.io/getting-started/ Unfortunately, at step 06 "Configure KLEE: From the KLEE source directory, run:" I get the following error: xxx@xxx18:~/klee$ ./configure…
Giuseppe
  • 447
  • 2
  • 5
  • 14
-1
votes
1 answer

how to use symbolic execution to find bug, for example SAGE,KLEE,S2E

just as the title,anyone knows the difference of the ways that those tool use to find bug? kLEE and SAGE maybe can find out-of-bound access and buffer overflow, KLEE can use assertions ,but any other ways?
valiant wang
  • 75
  • 10
-1
votes
1 answer

What are the inputs to the KLEE core-utils experiment discussed in the paper?

I'm having trouble reproducing the results in Figure 7 of this paper: http://www.stanford.edu/~engler/klee-osdi-2008.pdf Specifically, I tried to test the core util's "tac" command doing so: klee.cde -max-time=60 --optimize --libc=uclibc…
user1068636
  • 1,871
  • 7
  • 33
  • 57
-2
votes
1 answer

Does KLEE (LLVM) carry out compiler steps?

Does KLEE actually generate code? Does it carry out any of the other Benchmark steps of compilers/interpreters? (Lexical Analysis, Syntax Analysis, Semantic analysis, code optimization, intermediate code generation, code generation, symbol table…
user56683
  • 47
  • 1
  • 8
1 2 3 4
5