similar to: [LLVMdev] generate ponter/array access bounds expressions

What did you mean by "array access bounds expressions"? If you want to do something along the lines of constraint-based bounds check elimination, you can check out SAFECode. I don't think KLEE would be very useful for proving the safety of memory accesses, rather the lack thereof. Also, KLEE doesn't handle symbolic array sizes. If you can give more details about your project,

Best Regards! Eric Lew On 周三, 4月 22, 2015 at 12:11 下午, David Blaikie < dblaikie at gmail.com [dblaikie at gmail.com] > wrote: On Tue, Apr 21, 2015 at 8:34 PM, Eric Lu <eirc.lew at gmail.com> wrote: > Hi, all > > I want to instrument load/store operations in LLVM IR. And I find the LLVM > IR generated with flag -o3 is much more efficient than -o0, so I try to >

Please create a similar branch for Klee; I've been working on porting that to 2.7 as well.<br /> <br /> Best, Erich Ocean<br /> <br /> On Fri, Mar 5, 2010 at 8:43 PM, John Criswell (criswell@uiuc.edu) wrote:<br /> > <br /> > Dear SAFECoders and LLVMers,<br /> > <br /> > There is some new work on moving DSA to the new LLVM 2.7 API.

Hi, all I want to instrument load/store operations in LLVM IR. And I find the LLVM IR generated with flag -o3 is much more efficient than -o0, so I try to instrument on these optimized LLVM IR, but, some load operations are changed to Phi loads. Then, I try the -reg2mem flag to remove these phi nodes. The problems are: 1) I use visitLoadInst to collect these load operations, and it seems I

reg2mem does not eliminate phi nodes the way codegen does, it just converts ssa values to non-ssa values. It's not the same thing. On Tue, Apr 21, 2015 at 10:14 PM, Eric Lu <eirc.lew at gmail.com> wrote: > By the way. When I remove these phi nodes with -reg2mem, some new load > operations will be inserted, but when I try cache load operations with: > visitFunction >

Hi, Daniel I want to profile load/store operations, in order to reduce the overhead of profiling, I try to instrument the optimized llvm ir, which has phi nodes. BTW, when the value of some load/store operations may have multi-source, then the load will be translated into phi nodes, and all phi nodes are placed in the front of BB. Sometimes, the position is not where the load happens, is there

Hi, If I want to know where the stack variables are declared? For example, whether it is declared within a loop or not? Like variables a[100] and temp. int a[100]; for( int i = 0; i < N; i++){ int temp; } Can this be done in LLVM IR? Or should be implemented in Clang. Thanks! Eric -------------- next part -------------- An HTML attachment was scrubbed... URL:

1) Build clang with GCC-4.9.2, when compling other application s with clang/clang++, the default linker is ld, can I replace it with other linker tool， if we can, how to do it? I.E. can we use collect2 instead? 2) how to specify the path, if we do not use the default vertion GCC? Best Regards! Eric Lew -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi, The klee library directory is determined at compile time and cannot be changed afterwards. Have a look at tools/klee/main.cpp to see how it is computed. I usually use Klee without any install step, right from the build directory. This has never given me the error you see. Hope this helps, Jonas On Wed, Jun 5, 2013 at 5:26 PM, Alexandru Ionut Diaconescu < alexandruionutdiaconescu at

Hi all, I'm new to llvm and klee. Now I'm trying to build up coreutil with klee. Following the steps online (http://klee.llvm.org/TestingCoreutils.html), I went to step 3 and stuck. When I try to run: klee --libc=uclibc --posix-runtime ./cat.bc -version Error occurred like: klee: error: Cannot find linker input '/lib/libc.a' klee: ModuleUtil.cpp:42: llvm::Module*

Hello everyone, I am a novice with KLEE under LLVM. I am trying to build a KLEE project (on a new LLVM environment) and I have the following problem: echo Testing... Testing... echo There should be no assertion fails! There should be no assertion fails! klee -taint=direct taint_direct.o KLEE: output directory = "klee-out-8" klee: error: Cannot find linker input

Hi, I'm currently trying to find and fix memory leaks (compiling with ``-fsanitize=address``) in the KLEE tool [1] an having found some leaks and I'm having trouble suppressing them. I'm trying to suppress them using the ``-fsanitize-blacklist=blacklist.txt`` option as documented at [2]. I'm using Clang 3.7 ( Arch Linux package 3.7.0-6). The sort of reported leaks I see are ```

Hi, Ben gcc version is: 4.7.0 clang version is: 3.2 The command options are: 1) clang generated object files: clang -O3 -c *.c -o x.o link: clang *.o -lm -o mpeg2enc 2) gcc generated object files: gcc -O3 -c *.c -o x.o link: gcc *.o -lm -o mpeg2enc Yes, maybe it is the config introduced problems, I build it with enable debug options. Thanks! Eric On Thu, Jun 27, 2013 at 7:49 PM,

On Thu, Jun 27, 2013 at 6:04 PM, Eric Lu <eirc.lew at gmail.com> wrote: > Hi, Ben > gcc version is: 4.7.0 > clang version is: 3.2 > > The command options are: > 1) clang > generated object files: clang -O3 -c *.c -o x.o > link: clang *.o -lm -o mpeg2enc > > 2) gcc > generated object files: gcc -O3 -c *.c -o x.o > link: gcc *.o -lm -o mpeg2enc >

> Excuse me for the diversion but, is that interpreter of LLVM IR available > somewhere? Details on how it works, performance, etc? I'd be interested Yes it is available. The tool (KLEE [1]) is actually a lot more than an interpreter (although it can be used as one). KLEE allows you to mark certain variables (e.g. program inputs) as "symbolic". What this means is that the

Hi Eric,  I was considering machine instructions to get scope information. And variable declaration does not correspond to machine instruction, hence the problem i.e. no scope associated with it. If 'i' is initialized in the 'if-scope' then we get 'variable i' mapped to correct scope as corresponding machine instruction is generated for this. This is not a problem as we

Hi, all When compiling a program with -g -O0, and if we have a PC, then with addr2line, we can get the line number of the instruction. My quesions are: what is the result of Phi node instruction, can we get the similar results ? -- Best Regards! Eric Lew -------------- next part -------------- An HTML attachment was scrubbed... URL:

On Thu, Jul 11, 2013 at 9:33 PM, Eric Lu <eirc.lew at gmail.com> wrote: > Hi, David > yes, it is similar to your description. And do you know any methods to do > this in LLVM IR? I don't know the mid-level optimizers especially well - I doubt there's a thing that does exactly what you need - but a combination of existing passes/analyses might be able to tell you what you

Dear Developers, I am a Master's student at the ECE department of the University of Florida, USA.​​ For my research project, supervised by Prof. Mark Tehranipoor<http://tehranipoor.ece.ufl.edu/> and Prof. Farimah Farahmandi<http://farimah.ece.ufl.edu/>, I need to use Clang LLVM DataflowSanitizer library in KLEE. However, I have faced some difficulties (explained below) while

Hi, I am trying to evaluate how complex would be to modify KLEE ( http://klee.llvm.org/ ) so that it can run LLVM bitcode compiled from Java code obtained with vmjc (from the VMKIT project). Your feedback will be very appreciated. I am familiar with KLEE but I would like to know more about VMKIT, so please point me to the right docs/source code if appropriate. After a quick look over