[klee-dev] why do I get a very low value of BCov / branch coverage

[Sumit Kumar]

Hi Everyone,

I am getting a BCov value of 22 % for the bitcode input corresponding to
the following program although all the branches seem to have been taken:

    int x;
    int y;
    int z;
    klee_make_symbolic(&x, sizeof(x), "x");
    klee_make_symbolic(&y, sizeof(y), "y");
    klee_make_symbolic(&z, sizeof(z), "z");
    if(x < 1){
        if(y < 0)
        y = 0;
    }
    else{
        y = 1;
    }

Can anyone please explain why the branch coverage is so low ? I am using
llvm 2.9.

--
Thanks and Regards,
Sumit
-------------- next part --------------
HTML attachment scrubbed and removed