similar to: [LLVMdev] problem when building coreutil

Hello everyone, I am a novice with KLEE under LLVM. I am trying to build a KLEE project (on a new LLVM environment) and I have the following problem: echo Testing... Testing... echo There should be no assertion fails! There should be no assertion fails! klee -taint=direct taint_direct.o KLEE: output directory = "klee-out-8" klee: error: Cannot find linker input

Hi, The klee library directory is determined at compile time and cannot be changed afterwards. Have a look at tools/klee/main.cpp to see how it is computed. I usually use Klee without any install step, right from the build directory. This has never given me the error you see. Hope this helps, Jonas On Wed, Jun 5, 2013 at 5:26 PM, Alexandru Ionut Diaconescu < alexandruionutdiaconescu at

Hello, Our UC-KLEE tool discovered a memcpy() read overrun bug in dg_dispatch_as_host() (drivers/misc/vmw_vmci/vmci_datagram.c). This bug may allow a malicious user to leak private kernel heap data across the VMware VMCI interface (in a nearly identical fashion to the OpenSSL Heartbleed vulnerability from 2014), but the impact is probably minimal since this interface is only used for local

Hello, Our UC-KLEE tool discovered a memcpy() read overrun bug in dg_dispatch_as_host() (drivers/misc/vmw_vmci/vmci_datagram.c). This bug may allow a malicious user to leak private kernel heap data across the VMware VMCI interface (in a nearly identical fashion to the OpenSSL Heartbleed vulnerability from 2014), but the impact is probably minimal since this interface is only used for local

Hi, I'm currently trying to find and fix memory leaks (compiling with ``-fsanitize=address``) in the KLEE tool [1] an having found some leaks and I'm having trouble suppressing them. I'm trying to suppress them using the ``-fsanitize-blacklist=blacklist.txt`` option as documented at [2]. I'm using Clang 3.7 ( Arch Linux package 3.7.0-6). The sort of reported leaks I see are ```

> Excuse me for the diversion but, is that interpreter of LLVM IR available > somewhere? Details on how it works, performance, etc? I'd be interested Yes it is available. The tool (KLEE [1]) is actually a lot more than an interpreter (although it can be used as one). KLEE allows you to mark certain variables (e.g. program inputs) as "symbolic". What this means is that the

Dear Developers, I am a Master's student at the ECE department of the University of Florida, USA.​​ For my research project, supervised by Prof. Mark Tehranipoor<http://tehranipoor.ece.ufl.edu/> and Prof. Farimah Farahmandi<http://farimah.ece.ufl.edu/>, I need to use Clang LLVM DataflowSanitizer library in KLEE. However, I have faced some difficulties (explained below) while

Hi, I am trying to evaluate how complex would be to modify KLEE ( http://klee.llvm.org/ ) so that it can run LLVM bitcode compiled from Java code obtained with vmjc (from the VMKIT project). Your feedback will be very appreciated. I am familiar with KLEE but I would like to know more about VMKIT, so please point me to the right docs/source code if appropriate. After a quick look over

Hi Andreas, Cloud9 is a project that has an extensive POSIX environment model which also lets you symbolically execute multithreaded programs. It is based on KLEE. http://dslab.epfl.ch/pubs/cloud9.pdf Portend builds on top of Cloud9 to perform race detection/classification: http://dslab.epfl.ch/pubs/portend.pdf Cloud9 code base is also public, it might be of interest to you:

Are there any "current" Linux distros that have installable packages for llvm, clang, nad klee? I am struggling to get klee built and need a working klee setup asap. Thanks in advance, Donald

Hi, I'm currently working on the KLEE tool that uses LLVM (2.9 because that's what KLEE currently uses) and in particular I'm having an unexpected problem with the llvm::cl::bits class. I try something like this... enum testx { A,B }; cl::bits<testx> queryLoggingOptions("option",cl::values( clEnumVal(A,"this is a"),

Hi, I'm a contributor to the KLEE project (based on LLVM) and I'm currently looking at trying to add the following functionality to KLEE... (1). Be able to iterate through registered command line options and programmatically hide them. We're interested in this because we wish to hide (unless -help-hidden is called) several LLVM options. (2). Be able to place an option into a category

What did you mean by "array access bounds expressions"? If you want to do something along the lines of constraint-based bounds check elimination, you can check out SAFECode. I don't think KLEE would be very useful for proving the safety of memory accesses, rather the lack thereof. Also, KLEE doesn't handle symbolic array sizes. If you can give more details about your project,

Hi, I am using klee-gcc to compile 'findutils', but I don't know why the variables are all replaced with temp variables(such as %10) and instructions are reordered for optimizations, how can I generate the bytecode and reserve the program variables. I used the next commands without any optimization options: 1. $ ../configure --disable-nls CFLAGS="-g" 2. $

Hi all, I start this on in a new thread. I setup the deny-user setting to temporarily prevent users from logging in and (that would be great) also stop mail delivery for said user. All this is because of our upcoming migration. Now it seems that lmtp is ignoring this setting. This is from the logfile: Aug 21 13:01:00 klee dovecot: lmtp(pid): Connect from IP Aug 21 13:01:00 klee dovecot:

When I try to execute the following example, I get an error message: /usr/local/lib/ruby/gems/1.8/gems/mocha-0.5.4/lib/mocha/object.rb:40: in `expects'': undefined method `stub'' for nil:NilClass (NoMethodError) from test8.rb:5 What could be the reason? I tried with the latest Mocha Ruby gem, and I also tried it with the Rails plugin. The example: require

Hi I need a concolic execution framework based on LLVM. As far as I know, KLEE might be the best choice. However, KLEE(the stable version) is based on LLVM 3.4. I compiled my code with the latest LLVM, whose version is 7.0. Anyone know whether the bitcode could be used by KLEE. Or do I have to compile with the old version of LLVM again. Furthermore, if you have any other concolic execution

Hi, I'm working on a tool (KLEE) that interprets LLVM bitcode. One of the things it does is it instruments the LLVM bitcode with checks for division by zero. It does this by injecting calls to a function "klee_div_zero_check(long long divisor)" just before every division instruction (e.g. SDiv). These checks are injected by a pass that has been implemented in KLEE. This

Hello, In my reading over the last couple of days, I have read that in order for klee to work with "native" Linux programs, I need to install the uClibc posix support for klee. I am not finding the uClibc source in the llvm svn repository anywhere. Is this still necessary for testing native Linux applications, and if so, where do I get the uClibc source to compile? Thanks in

On Sat, Mar 16, 2013 at 06:16:01AM -0700, Hongxu Chen wrote: > Thanks for your help, Wei-Ren and Anton. > > However since I am doing some experiments with klee(http://klee.llvm.org/ > GetStarted.html) and llvm-gcc seems to have better compatibility with it. So I > still hope that I can use llvm-gcc:-) Seems you already found the answer on klee ML. :) Regards, chenwj --