[klee-dev] KLEE Forking Flags

[Daniel Schwartz]

Hi,

Can someone please help me understand some of the KLEE forking flags:

1. max-forks=n

My understanding is that KLEE will allow the code being tested to fork n
times, resulting in n+1 paths explored. I believe that KLEE will halt at
any additional branching statements and find an input that reaches the
statement. This is instead of arbitrarily picking a branch and solving the
constraints at true path-end.


2. max-static-fork-pct and max-static-cpfork-pct

I'm having trouble understanding these two.




Thank you,
Daniel Schwartz
-------------- next part --------------
HTML attachment scrubbed and removed