How do I create a testcase that targets a specified branch?

Question

38 views Asked by bam At 17 October 2022 at 08:55

I try to "dynamic symbolic execution" with klee.

int a = 0;
klee_make_symbolic(&a, sizeof(a), "a");
if (a == 0) 
    ... // I want to touch only this branch
else if (a > 0)
    ...
else
    ...

Is there any option to make specified branch?

I don't want to make all testcases.

There are 1 answers

**hibert** · Answer 1 · 2022-10-23T12:32:40+00:00

hibert On 23 October 2022 at 12:32

instrument an assert(0); statement into the branch you interested and then run klee with the parameter -exit-on-error-type=Assert.

KLEE will exit and genrate a test case for the path you instrumented. This is the easiest way I come up with.