# KLEE-Psychic

## Usage

The metaprogram under test is to be built with Clang 12 and the following flags:

    -g -O0 -Xclang -disable-O0-optnone
    -fsanitize=undefined -fno-sanitize=local-bounds,function,vptr'

Both native executable and LLVM bitcode are needed.
For the bitcode, pass `-emit-llvm -c -DKLEE_RUNTIME` to Clang

KLEE should then be run with the following flags:

    --use-visitor-hash=0 --posix-runtime --libc uclibc --ubsan-runtime