[klee-dev] KLEE Memory Mapping

[Daniel Schwartz]

Hi,

I'm trying to understand how KLEE maps symbolic variables to expressions.
How does KLEE get a unique name for each variable? Without debug
information, I don't see how to trivially get one from an LLVM Instruction.


Can someone please explain this to me, or if it's too complicated for an
email, point me in the right direction in the source code?



Thanks,
Daniel Schwartz
-------------- next part --------------
HTML attachment scrubbed and removed