[klee-dev] Does klee support for function return address

[高凤娟]

Hi,
 Is there any function that gives us the distance between the buffer and the 
return address?I'm trying to detect buffer overflow.In order to make sure the buffer overflow detected is a dangerous one,I want to know if the overflowed string overlap the return address.For example,//////////////////////////.....(other code)char a[2];char b[6];klee_make_symbolic(b)strcpy(a,b);////////////////////////I want to know the distance between a[1] and the return address.Sorry for my poor english...Anyone can help me?
Many thanks in advance.
-------------------------------
Richel Gao
-------------- next part --------------
HTML attachment scrubbed and removed