如何判断在KLEE中的指令中调用的变量是符号还是具体的

Question

我想知道当KLEE执行涉及变量的指令时，是否有办法判断KLEE中的变量是否符号。

Answer 1

为此目的有一个API。

/* Return true if the given value is symbolic (represented by an
* expression) in the current state. This is primarily for debugging
* and writing tests but can also be used to enable prints in replay
* mode.
*/
unsigned klee_is_symbolic(uintptr_t n);