[klee-dev] create ponter/array access bounds expressions with klee

[Paul Marinescu]

Hi,
KLEE does generate symbolic expressions to check for out-of-bounds memory access. If you are looking for something specific, you may get more answers if you explain it in a few sentences, rather than expect people to read the whole paper.

Best,
Paul

On 14 Jun 2013, at 08:31, Eric Lu <eirc.lew at gmail.com> wrote:

> Hello, 
>   
>   I want to generate pointer/array access bounds expressions with KLEE in LLVM. I am new to symbolic execution and KLEE, and I am not sure if  some body have done this before? 
>   
>   What I need is something like symbolic execution in [1]， is it possible to implement [1] based KLEE?
> 
>    Or are there some better ways to do this?  Any advice is welcome!
> 
> 
> [1]   Symbolic Bounds Analysis of Pointers, Array Indices, and Accessed Memory Regions
> 
> 
> Thanks!
> 
> Eric
> _______________________________________________
> klee-dev mailing list
> klee-dev at imperial.ac.uk
> https://mailman.ic.ac.uk/mailman/listinfo/klee-dev

-------------- next part --------------
HTML attachment scrubbed and removed