1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
[kernel] Parsing share/libc/__fc_builtin_for_normalization.i (no preprocessing)
[kernel] Parsing tests/value/not_ct_array_arg.i (no preprocessing)
[value] Analyzing a complete application starting at main
[value] Computing initial state
[value] Initial state computed
[value:initial-state] Values of globals at initialization
v ∈ [--..--]
tests/value/not_ct_array_arg.i:9:[value] warning: during initialization of variable 'tb', size of type 'int [a]' cannot be
computed (Array with non-constant length.)
tests/value/not_ct_array_arg.i:10:[value] warning: out of bounds write. assert \valid((int *)tb);
[value] DUMPING STATE of file tests/value/not_ct_array_arg.i line 11
v ∈ [--..--]
a ∈ [--..--]
tb ∈ {{ (int (*)[a])&S_tb }}
tc ∈ {{ NULL ; &S_tc[0] }}
S_tc[0..1][0..9] ∈ [--..--]
S_tb[bits 0 to 31] ∈ {1}
[bits 32 to ..] ∈ [--..--] or UNINITIALIZED
=END OF DUMP==
tests/value/not_ct_array_arg.i:12:[value] warning: out of bounds write. assert \valid(&(*(tb + 9))[100]);
[value] DUMPING STATE of file tests/value/not_ct_array_arg.i line 13
v ∈ [--..--]
a ∈ [--..--]
tb ∈ {{ (int (*)[a])&S_tb }}
tc ∈ {{ NULL ; &S_tc[0] }}
S_tc[0..1][0..9] ∈ [--..--]
S_tb[bits 0 to 31] ∈
{{ garbled mix of &{tb}
(origin: Misaligned {tests/value/not_ct_array_arg.i:12}) }}
[bits 32 to ..] ∈
{{ garbled mix of &{tb}
(origin: Misaligned {tests/value/not_ct_array_arg.i:12}) }} or UNINITIALIZED
=END OF DUMP==
tests/value/not_ct_array_arg.i:14:[value] warning: out of bounds write. assert \valid(&(*(tc + 1))[1]);
tests/value/not_ct_array_arg.i:16:[value] warning: accessing out of bounds index. assert 16 < 10;
tests/value/not_ct_array_arg.i:16:[kernel] warning: all target addresses were invalid. This path is assumed to be dead.
[value] Recording results for main
[value] done for function main
tests/value/not_ct_array_arg.i:16:[value] assertion 'Value,index_bound' got final status invalid.
[value] ====== VALUES COMPUTED ======
[value:final-states] Values at end of function main:
S_tc{[0][0..9]; [1][0]} ∈ [--..--]
[1][1] ∈ {3}
[1][2..9] ∈ [--..--]
S_tb[bits 0 to 31] ∈
{{ garbled mix of &{tb}
(origin: Misaligned {tests/value/not_ct_array_arg.i:12}) }}
[bits 32 to ..] ∈
{{ garbled mix of &{tb}
(origin: Misaligned {tests/value/not_ct_array_arg.i:12}) }} or UNINITIALIZED
[from] Computing for function main
[from] Computing for function Frama_C_dump_each <-main
[from] Done for function Frama_C_dump_each
[from] Done for function main
[from] ====== DEPENDENCIES COMPUTED ======
These dependencies hold at termination for the executions that terminate:
[from] Function main:
S_tc[1][1] FROM tc
S_tb[bits 0 to 31] FROM tb
[bits 32 to ..] FROM tb (and SELF)
[from] ====== END OF DEPENDENCIES ======
[inout] Out (internal) for function main:
S_tc[1][1]; S_tb[bits 0 to ..]
[inout] Inputs for function main:
v
|
