[klee-dev] Reproduce the OSDI'08 coreutils result on the latest version of KLEE

[Cristian Cadar]

Hi Shiyu,

On 24/09/2013 22:06, Shiyu Dong wrote:
> One more question: does KLEE has any way to limit to the number of paths to
> explore? From the --help command the only possible option I see is
> "-stop-after-n-tests=<uint>" because I assume each test case corresponds to
> one path by observing the test results that I already have. Is that a good
> assumption?
At some level, yes, but this ignores the partial paths that have not 
resulted in a test case yet.  Also, to avoid excessive test case 
generation, it is often a good idea to use the flag 
-only-output-states-covering-new, which only generates a test case when 
new code is covered (note that the command line discussed before 
includes this flag).

> Are there better flags to use?
If I understand correctly, what you want is actually -max-forks=<uint>.

Best,
Cristian