[klee-dev] Having Low Coverage in C Program Using KLEE.

[Norlina Pasaribu]

Hello All,

I  really need some suggestion why KLEE does not have good coverage in my
experiment. I have tried some experiments to find good coverage using KLEE,
the higest coverage I found is 10%. The Program is Space from sir.unl.edu,
Software Artifact Repository Website contains about 9000 lines of code.

Different MaxTime.



*No*

*Command for Generating testcase*

*number testcase generated*

*GCov*

*BCov*

*Total*

*instruction*

*Complete*

*path*

*Generate tesecase*

1

klee -posix-runtime -libc=uclibc -max-time=60 ./space.bc A -sym-files 1 1024

2020

10.83% of 3656

9.08

*341621*





13





13





2

klee -posix-runtime -libc=uclibc -max-time=1800 ./space.bc A -sym-files 1 10

13

No executable

5.09




341621





13



13



3

klee -posix-runtime -libc=uclibc -max-time=3000 ./space.bc A -sym-files 1 10

21162

10.89%

9.08

151414

13

13

 4

30000

 540000 (Cant run the test case)











Different Command for generating testcase

No

Perintah Generate tesecase

*number testcase generated*

GCov

BCov

Total instruction

Complete p

ath

Generate tesecase

1

klee -posix-runtime -libc=uclibc -max-time=60 ./space.bc A -sym-files 1 1024

2020

10.83% of 3656

9.08

*341621*

13

13

4

klee -posix-runtime -libc=uclibc ./space.bc A -sym-files 1 1

13

9.98% of 3656

7.46



*341621*





13





13





7

klee --only-output-states-covering-new --optimize --libc=uclibc
--posix-runtime ./space.bc --sym-args 0 2 4

7

8.37% of 3656

4.65

341621





13





13




Any body have suggestion for me how to increase the coverage ? Thank you
for attention.

Best regard,
Norlina Pasaribu
-------------- next part --------------
HTML attachment scrubbed and removed