[klee-dev] create ponter/array access bounds expressions with klee

[Eric Lu]

Hello,

  I want to generate pointer/array access bounds expressions with KLEE in
LLVM. I am new to symbolic execution and KLEE, and I am not sure if  some
body have done this before?

  What I need is something like symbolic execution in [1]， is it possible
to implement [1] based KLEE?

   Or are there some better ways to do this?  Any advice is welcome!


[1]   Symbolic Bounds Analysis of Pointers, Array Indices, and Accessed
Memory Regions


Thanks!

Eric
-------------- next part --------------
HTML attachment scrubbed and removed