diff options
author | Lukas Wölfer <lukas.woelfer@rwth-aachen.de> | 2017-06-24 18:59:27 +0200 |
---|---|---|
committer | Dan Liew <delcypher@gmail.com> | 2017-08-04 11:52:03 +0100 |
commit | fff6485e2f3ec82b6cb31e1f5038adef09be7eed (patch) | |
tree | 91ccb200f906f9314f79e4bb11037b2948a641e2 /lib/Core/Searcher.cpp | |
parent | a4ed54c2b8228a30785c11d7542427a1bd1f7292 (diff) | |
download | klee-fff6485e2f3ec82b6cb31e1f5038adef09be7eed.tar.gz |
Removed merging searchers
Diffstat (limited to 'lib/Core/Searcher.cpp')
-rw-r--r-- | lib/Core/Searcher.cpp | 211 |
1 files changed, 0 insertions, 211 deletions
diff --git a/lib/Core/Searcher.cpp b/lib/Core/Searcher.cpp index 0e7aa685..b9f22538 100644 --- a/lib/Core/Searcher.cpp +++ b/lib/Core/Searcher.cpp @@ -301,217 +301,6 @@ bool RandomPathSearcher::empty() { /// -BumpMergingSearcher::BumpMergingSearcher(Executor &_executor, Searcher *_baseSearcher) - : executor(_executor), - baseSearcher(_baseSearcher), - mergeFunction(executor.kmodule->kleeMergeFn) { -} - -BumpMergingSearcher::~BumpMergingSearcher() { - delete baseSearcher; -} - -/// - -Instruction *BumpMergingSearcher::getMergePoint(ExecutionState &es) { - if (mergeFunction) { - Instruction *i = es.pc->inst; - - if (i->getOpcode()==Instruction::Call) { - CallSite cs(cast<CallInst>(i)); - if (mergeFunction==cs.getCalledFunction()) - return i; - } - } - - return 0; -} - -ExecutionState &BumpMergingSearcher::selectState() { -entry: - // out of base states, pick one to pop - if (baseSearcher->empty()) { - std::map<llvm::Instruction*, ExecutionState*>::iterator it = - statesAtMerge.begin(); - ExecutionState *es = it->second; - statesAtMerge.erase(it); - ++es->pc; - - baseSearcher->addState(es); - } - - ExecutionState &es = baseSearcher->selectState(); - - if (Instruction *mp = getMergePoint(es)) { - std::map<llvm::Instruction*, ExecutionState*>::iterator it = - statesAtMerge.find(mp); - - baseSearcher->removeState(&es); - - if (it==statesAtMerge.end()) { - statesAtMerge.insert(std::make_pair(mp, &es)); - } else { - ExecutionState *mergeWith = it->second; - if (mergeWith->merge(es)) { - // hack, because we are terminating the state we need to let - // the baseSearcher know about it again - baseSearcher->addState(&es); - executor.terminateState(es); - } else { - it->second = &es; // the bump - ++mergeWith->pc; - - baseSearcher->addState(mergeWith); - } - } - - goto entry; - } else { - return es; - } -} - -void BumpMergingSearcher::update( - ExecutionState *current, const std::vector<ExecutionState *> &addedStates, - const std::vector<ExecutionState *> &removedStates) { - baseSearcher->update(current, addedStates, removedStates); -} - -/// - -MergingSearcher::MergingSearcher(Executor &_executor, Searcher *_baseSearcher) - : executor(_executor), - baseSearcher(_baseSearcher), - mergeFunction(executor.kmodule->kleeMergeFn) { -} - -MergingSearcher::~MergingSearcher() { - delete baseSearcher; -} - -/// - -Instruction *MergingSearcher::getMergePoint(ExecutionState &es) { - if (mergeFunction) { - Instruction *i = es.pc->inst; - - if (i->getOpcode()==Instruction::Call) { - CallSite cs(cast<CallInst>(i)); - if (mergeFunction==cs.getCalledFunction()) - return i; - } - } - - return 0; -} - -ExecutionState &MergingSearcher::selectState() { - // FIXME: this loop is endless if baseSearcher includes RandomPathSearcher. - // The reason is that RandomPathSearcher::removeState() does nothing... - while (!baseSearcher->empty()) { - ExecutionState &es = baseSearcher->selectState(); - if (getMergePoint(es)) { - baseSearcher->removeState(&es, &es); - statesAtMerge.insert(&es); - } else { - return es; - } - } - - // build map of merge point -> state list - std::map<Instruction*, std::vector<ExecutionState*> > merges; - for (std::set<ExecutionState*>::const_iterator it = statesAtMerge.begin(), - ie = statesAtMerge.end(); it != ie; ++it) { - ExecutionState &state = **it; - Instruction *mp = getMergePoint(state); - - merges[mp].push_back(&state); - } - - if (DebugLogMerge) - llvm::errs() << "-- all at merge --\n"; - for (std::map<Instruction*, std::vector<ExecutionState*> >::iterator - it = merges.begin(), ie = merges.end(); it != ie; ++it) { - if (DebugLogMerge) { - llvm::errs() << "\tmerge: " << it->first << " ["; - for (std::vector<ExecutionState*>::iterator it2 = it->second.begin(), - ie2 = it->second.end(); it2 != ie2; ++it2) { - ExecutionState *state = *it2; - llvm::errs() << state << ", "; - } - llvm::errs() << "]\n"; - } - - // merge states - std::set<ExecutionState*> toMerge(it->second.begin(), it->second.end()); - while (!toMerge.empty()) { - ExecutionState *base = *toMerge.begin(); - toMerge.erase(toMerge.begin()); - - std::set<ExecutionState*> toErase; - for (std::set<ExecutionState*>::iterator it = toMerge.begin(), - ie = toMerge.end(); it != ie; ++it) { - ExecutionState *mergeWith = *it; - - if (base->merge(*mergeWith)) { - toErase.insert(mergeWith); - } - } - if (DebugLogMerge && !toErase.empty()) { - llvm::errs() << "\t\tmerged: " << base << " with ["; - for (std::set<ExecutionState*>::iterator it = toErase.begin(), - ie = toErase.end(); it != ie; ++it) { - if (it!=toErase.begin()) llvm::errs() << ", "; - llvm::errs() << *it; - } - llvm::errs() << "]\n"; - } - for (std::set<ExecutionState*>::iterator it = toErase.begin(), - ie = toErase.end(); it != ie; ++it) { - std::set<ExecutionState*>::iterator it2 = toMerge.find(*it); - assert(it2!=toMerge.end()); - executor.terminateState(**it); - toMerge.erase(it2); - } - - // step past merge and toss base back in pool - statesAtMerge.erase(statesAtMerge.find(base)); - ++base->pc; - baseSearcher->addState(base); - } - } - - if (DebugLogMerge) - llvm::errs() << "-- merge complete, continuing --\n"; - - return selectState(); -} - -void -MergingSearcher::update(ExecutionState *current, - const std::vector<ExecutionState *> &addedStates, - const std::vector<ExecutionState *> &removedStates) { - if (!removedStates.empty()) { - std::vector<ExecutionState *> alt = removedStates; - for (std::vector<ExecutionState *>::const_iterator - it = removedStates.begin(), - ie = removedStates.end(); - it != ie; ++it) { - ExecutionState *es = *it; - std::set<ExecutionState*>::const_iterator it2 = statesAtMerge.find(es); - if (it2 != statesAtMerge.end()) { - statesAtMerge.erase(it2); - alt.erase(std::remove(alt.begin(), alt.end(), es), alt.end()); - } - } - baseSearcher->update(current, addedStates, alt); - } else { - baseSearcher->update(current, addedStates, removedStates); - } -} - -/// - BatchingSearcher::BatchingSearcher(Searcher *_baseSearcher, double _timeBudget, unsigned _instructionBudget) |