File: origin.0.res.oracle

package info (click to toggle)
frama-c 20161101%2Bsilicon%2Bdfsg-5
  • links: PTS, VCS
  • area: main
  • in suites: stretch
  • size: 42,324 kB
  • ctags: 35,695
  • sloc: ml: 200,142; ansic: 31,465; makefile: 2,334; sh: 1,643; lisp: 259; python: 85; asm: 26
file content (357 lines) | stat: -rw-r--r-- 15,390 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
[kernel] Parsing share/libc/__fc_builtin_for_normalization.i (no preprocessing)
[kernel] Parsing tests/value/origin.i (no preprocessing)
[value] Analyzing a complete application starting at main
[value] Computing initial state
[value] Initial state computed
[value:initial-state] Values of globals at initialization
  a ∈ {0}
  b ∈ {0}
  aa2 ∈ {0}
  p ∈ {0}
  pa1 ∈ {0}
  pa2 ∈ {0}
  qa2 ∈ {0}
  pa3 ∈ {0}
  q ∈ {0}
  t[0..11] ∈ {0}
  tt[0..9] ∈ {0}
  ta1[0..9] ∈ {0}
  ta2[0..9] ∈ {0}
  ta3[0..9] ∈ {0}
  tta2[0..9] ∈ {0}
  l1 ∈ {0}
  l2 ∈ {0}
  l3 ∈ {0}
  pl ∈ {0}
  Tm1[0] ∈ {{ &a }}
     [1] ∈ {{ &b }}
  Tm2[0] ∈ {{ &a }}
     [1] ∈ {{ &b }}
  Tm3[0] ∈ {{ &a }}
     [1] ∈ {{ &b }}
  Tm4[0] ∈ {{ &a }}
     [1] ∈ {{ &b }}
  pm1 ∈ {0}
  pm2 ∈ {0}
  qm2 ∈ {0}
  pun ∈ {0}
  pun2 ∈ {0}
  qun2 ∈ {0}
  random ∈ [--..--]
  esc1 ∈ {0}
  esc2 ∈ {0}
  esc3 ∈ {0}
  esc4 ∈ {0}
  esc5 ∈ {0}
  x ∈ {0}
  y ∈ {0}
  v.c ∈ {1}
   .[bits 8 to 15] ∈ {0}
   .i ∈ {2}
   .p ∈ {{ &x }}
   .t[0] ∈ {{ &y }}
   .t[1] ∈ {0}
[value] computing for function origin_arithmetic_1 <- main.
        Called from tests/value/origin.i:92.
tests/value/origin.i:14:[value] warning: signed overflow. assert -2147483648 ≤ -((int)((int *)ta1));
tests/value/origin.i:14:[value] warning: signed overflow. assert -((int)((int *)ta1)) ≤ 2147483647;
tests/value/origin.i:14:[value] Assigning imprecise value to pa1.
        The imprecision originates from Arithmetic {tests/value/origin.i:14}
tests/value/origin.i:15:[value] warning: out of bounds write. assert \valid(pa1);
[value] Recording results for origin_arithmetic_1
[value] Done for function origin_arithmetic_1
[value] computing for function origin_arithmetic_2 <- main.
        Called from tests/value/origin.i:93.
tests/value/origin.i:19:[value] warning: signed overflow. assert -2147483648 ≤ -((int)((int *)ta2));
tests/value/origin.i:19:[value] warning: signed overflow. assert -((int)((int *)ta2)) ≤ 2147483647;
tests/value/origin.i:19:[value] Assigning imprecise value to pa2.
        The imprecision originates from Arithmetic {tests/value/origin.i:19}
tests/value/origin.i:20:[value] Assigning imprecise value to qa2.
        The imprecision originates from Arithmetic {tests/value/origin.i:19}
tests/value/origin.i:20:[value] warning: signed overflow. assert -2147483648 ≤ -((int)((int *)tta2));
tests/value/origin.i:20:[value] warning: signed overflow. assert -((int)((int *)tta2)) ≤ 2147483647;
tests/value/origin.i:20:[value] Assigning imprecise value to qa2.
        The imprecision originates from Arithmetic {tests/value/origin.i:20}
tests/value/origin.i:21:[value] warning: out of bounds write. assert \valid(qa2);
[value] Recording results for origin_arithmetic_2
[value] Done for function origin_arithmetic_2
[value] computing for function origin_arithmetic_3 <- main.
        Called from tests/value/origin.i:94.
tests/value/origin.i:25:[value] warning: signed overflow. assert -2147483648 ≤ -((int)((int *)ta3));
tests/value/origin.i:25:[value] warning: signed overflow. assert -((int)((int *)ta3)) ≤ 2147483647;
tests/value/origin.i:25:[value] Assigning imprecise value to pa3.
        The imprecision originates from Arithmetic {tests/value/origin.i:25}
tests/value/origin.i:26:[value] warning: out of bounds write. assert \valid(pa3);
[value] Recording results for origin_arithmetic_3
[value] Done for function origin_arithmetic_3
[value] computing for function origin_leaf_1 <- main.
        Called from tests/value/origin.i:95.
[value] computing for function g <- origin_leaf_1 <- main.
        Called from tests/value/origin.i:36.
tests/value/origin.i:36:[kernel] warning: Neither code nor specification for function g, generating default assigns from the prototype
[value] using specification for function g
[value] Done for function g
[value] Recording results for origin_leaf_1
[value] Done for function origin_leaf_1
[value] computing for function g <- main.
        Called from tests/value/origin.i:97.
[value] Done for function g
tests/value/origin.i:97:[value] warning: signed overflow. assert -2147483648 ≤ l2 + tmp;
                                  (tmp from g())
tests/value/origin.i:97:[value] warning: signed overflow. assert l2 + tmp ≤ 2147483647;
                                  (tmp from g())
[value] computing for function gp <- main.
        Called from tests/value/origin.i:98.
tests/value/origin.i:98:[kernel] warning: Neither code nor specification for function gp, generating default assigns from the prototype
[value] using specification for function gp
[value] Done for function gp
tests/value/origin.i:99:[value] warning: out of bounds read. assert \valid_read(pl);
[value] computing for function origin_misalign_1 <- main.
        Called from tests/value/origin.i:100.
tests/value/origin.i:46:[value] Assigning imprecise value to pm1.
        The imprecision originates from Misaligned {tests/value/origin.i:46}
tests/value/origin.i:47:[value] warning: out of bounds write. assert \valid(pm1);
[value] Recording results for origin_misalign_1
[value] Done for function origin_misalign_1
[value] computing for function origin_misalign_2 <- main.
        Called from tests/value/origin.i:101.
tests/value/origin.i:52:[value] Assigning imprecise value to qm2.
        The imprecision originates from Misaligned {tests/value/origin.i:52}
tests/value/origin.i:53:[value] Reading left-value qm2.
        It contains a garbled mix of {a; b} because of Misaligned
        {tests/value/origin.i:52}.
[value] Called Frama_C_show_each({{ garbled mix of &{a; b}
                                 (origin: Misaligned {tests/value/origin.i:52}) }})
tests/value/origin.i:54:[value] warning: out of bounds write. assert \valid(qm2);
[value] Recording results for origin_misalign_2
[value] Done for function origin_misalign_2
[value] computing for function origin_uninitialized_1 <- main.
        Called from tests/value/origin.i:104.
tests/value/origin.i:63:[value] warning: accessing uninitialized left-value. assert \initialized(&pi);
[value] Recording results for origin_uninitialized_1
[value] Done for function origin_uninitialized_1
[value] computing for function origin_uninitialized_2 <- main.
        Called from tests/value/origin.i:105.
tests/value/origin.i:70:[value] warning: accessing uninitialized left-value. assert \initialized(&pi);
tests/value/origin.i:73:[value] warning: accessing uninitialized left-value. assert \initialized(&i);
[value] Recording results for origin_uninitialized_2
[value] Done for function origin_uninitialized_2
[value] computing for function local_escape_1 <- main.
        Called from tests/value/origin.i:106.
tests/value/origin.i:83:[value] warning: signed overflow. assert -2147483648 ≤ -((int)(&arg));
tests/value/origin.i:83:[value] warning: signed overflow. assert -((int)(&arg)) ≤ 2147483647;
tests/value/origin.i:83:[value] Assigning imprecise value to esc3.
        The imprecision originates from Arithmetic {tests/value/origin.i:83}
[value] Recording results for local_escape_1
[value] Done for function local_escape_1
tests/value/origin.i:106:[value] warning: locals {arg} escaping the scope of local_escape_1 through esc1
tests/value/origin.i:106:[value] warning: locals {local1} escaping the scope of local_escape_1 through esc2
tests/value/origin.i:106:[value] warning: locals {arg} escaping the scope of local_escape_1 through esc3
tests/value/origin.i:106:[value] warning: locals {local1} escaping the scope of local_escape_1 through esc4
[value] Recording results for main
[value] done for function main
tests/value/origin.i:73:[value] assertion 'Value,initialisation' got final status invalid.
[value] ====== VALUES COMPUTED ======
[value:final-states] Values at end of function local_escape_1:
  esc1 ∈ {{ (int)&arg }}
  esc2 ∈ {{ (int)&local1 }}
  esc3 ∈
      {{ garbled mix of &{arg}
       (origin: Arithmetic {tests/value/origin.i:83}) }}
  esc4 ∈ {{ NULL + {12} ; (int)&local1 }}
  esc5 ∈ {{ (int)&esc1 }}
  local2 ∈ {{ (int)&local1 }}
[value:final-states] Values at end of function origin_arithmetic_1:
  pa1 ∈ {{ &ta1 + [0..36] }}
  ta1[0..9] ∈ {0}
[value:final-states] Values at end of function origin_arithmetic_2:
  pa2 ∈
     {{ garbled mix of &{ta2}
      (origin: Arithmetic {tests/value/origin.i:19}) }}
  qa2 ∈ {{ &ta2 + [0..36] ; &tta2 + [0..36] }}
  ta2[0..9] ∈
     {{ garbled mix of &{aa2}
      (origin: Misaligned {tests/value/origin.i:21}) }}
  tta2[0..9] ∈
      {{ garbled mix of &{aa2}
       (origin: Misaligned {tests/value/origin.i:21}) }}
[value:final-states] Values at end of function origin_arithmetic_3:
  pa3 ∈ {{ &ta3 + [0..36] }}
  ta3[0..9] ∈ [--..--]
[value:final-states] Values at end of function origin_leaf_1:
  l1 ∈ [--..--]
[value:final-states] Values at end of function origin_misalign_1:
  a ∈ {0; 1}
  b ∈ {0; 1}
  pm1 ∈ {{ &a ; &b }}
[value:final-states] Values at end of function origin_misalign_2:
  a ∈ {{ NULL + {0; 1} ; (int)&a }}
  b ∈ {{ NULL + {0; 1} ; (int)&a }}
  pm2[bits 0 to 15]# ∈ {{ (? *)&a }}%32, bits 16 to 31 
     [bits 16 to 31]# ∈ {{ (? *)&b }}%32, bits 0 to 15 
  qm2 ∈ {{ &a ; &b }}
[value:final-states] Values at end of function origin_uninitialized_1:
  pun ∈ {{ &a }}
  pi ∈ {{ &a }}
[value:final-states] Values at end of function origin_uninitialized_2:
  pun2 ∈ {{ &a }}
  qun2 ∈ {0}
  pi ∈ {{ &a }}
[value:final-states] Values at end of function main:
  a ∈ {{ NULL + {0; 1} ; (int)&a }}
  b ∈ {{ NULL + {0; 1} ; (int)&a }}
  p[bits 0 to 15]# ∈ {{ (? *)&a }}%32, bits 16 to 31 
   [bits 16 to 31]# ∈ {{ (? *)&b }}%32, bits 0 to 15 
  pa1 ∈ {{ &ta1 + [0..36] }}
  pa2 ∈
     {{ garbled mix of &{ta2}
      (origin: Arithmetic {tests/value/origin.i:19}) }}
  qa2 ∈ {{ &ta2 + [0..36] ; &tta2 + [0..36] }}
  pa3 ∈ {{ &ta3 + [0..36] }}
  q[bits 0 to 7] ∈
   {{ garbled mix of &{a} (origin: Merge {tests/value/origin.i:104}) }}
   [bits 8 to 15] ∈
   {{ garbled mix of &{a; b} (origin: Merge {tests/value/origin.i:104}) }}
   [bits 16 to 31] ∈
   {{ garbled mix of &{b} (origin: Merge {tests/value/origin.i:104}) }}
  ta1[0..9] ∈ {0}
  ta2[0..9] ∈
     {{ garbled mix of &{aa2}
      (origin: Misaligned {tests/value/origin.i:21}) }}
  ta3[0..9] ∈ [--..--]
  tta2[0..9] ∈
      {{ garbled mix of &{aa2}
       (origin: Misaligned {tests/value/origin.i:21}) }}
  l1 ∈ [--..--]
  l2 ∈ [--..--]
  l3 ∈ [--..--]
  pl ∈ {{ &alloced_return_gp + [0..2147483644],0%4 }}
  pm1 ∈ {{ &a ; &b }}
  pm2[bits 0 to 15]# ∈ {{ (? *)&a }}%32, bits 16 to 31 
     [bits 16 to 31]# ∈ {{ (? *)&b }}%32, bits 0 to 15 
  qm2 ∈ {{ &a ; &b }}
  pun ∈ {{ &a }}
  pun2 ∈ {{ &a }}
  qun2 ∈ {0}
  esc1 ∈ ESCAPINGADDR
  esc2 ∈ ESCAPINGADDR
  esc3 ∈ [--..--] or ESCAPINGADDR
  esc4 ∈ {12} or ESCAPINGADDR
  esc5 ∈ {{ (int)&esc1 }}
[from] Computing for function local_escape_1
[from] Done for function local_escape_1
[from] Computing for function origin_arithmetic_1
[from] Done for function origin_arithmetic_1
[from] Computing for function origin_arithmetic_2
[from] Done for function origin_arithmetic_2
[from] Computing for function origin_arithmetic_3
[from] Done for function origin_arithmetic_3
[from] Computing for function origin_leaf_1
[from] Computing for function g <-origin_leaf_1
[from] Done for function g
[from] Done for function origin_leaf_1
[from] Computing for function origin_misalign_1
[from] Done for function origin_misalign_1
[from] Computing for function origin_misalign_2
[from] Done for function origin_misalign_2
[from] Computing for function origin_uninitialized_1
[from] Done for function origin_uninitialized_1
[from] Computing for function origin_uninitialized_2
[from] Done for function origin_uninitialized_2
[from] Computing for function main
[from] Computing for function gp <-main
[from] Done for function gp
[from] Done for function main
[from] ====== DEPENDENCIES COMPUTED ======
       These dependencies hold at termination for the executions that terminate:
[from] Function g:
  \result FROM \nothing
[from] Function gp:
  \result FROM \nothing
[from] Function local_escape_1:
  esc1 FROM \nothing
  esc2 FROM \nothing
  esc3 FROM \nothing
  esc4 FROM random
  esc5 FROM \nothing
[from] Function origin_arithmetic_1:
  pa1 FROM \nothing
  ta1[0..9] FROM \nothing (and SELF)
[from] Function origin_arithmetic_2:
  pa2 FROM \nothing
  qa2 FROM c1
  ta2[0..9] FROM c1 (and SELF)
  tta2[0..9] FROM c1 (and SELF)
[from] Function origin_arithmetic_3:
  pa3 FROM \nothing
  ta3[0..9] FROM \nothing (and SELF)
[from] Function origin_leaf_1:
  l1 FROM \nothing
[from] Function origin_misalign_1:
  a FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  b FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  pm1 FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]}
[from] Function origin_misalign_2:
  a FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  b FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  pm2 FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]}
  qm2 FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]}
[from] Function origin_uninitialized_1:
  pun FROM c1
[from] Function origin_uninitialized_2:
  pun2 FROM c1
  qun2 FROM c1; c2 (and SELF)
[from] Function main:
  a FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]};
         Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  b FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]};
         Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]} (and SELF)
  p FROM Tm3{[0][bits 16 to 31]; [1][bits 0 to 15]}
  pa1 FROM \nothing
  pa2 FROM \nothing
  qa2 FROM c1
  pa3 FROM \nothing
  q FROM Tm3{[0][bits 16 to 31]; [1][bits 0 to 15]};
         Tm4{[0][bits 24 to 31]; [1][bits 0 to 23]}; c1
  ta1[0..9] FROM \nothing (and SELF)
  ta2[0..9] FROM c1 (and SELF)
  ta3[0..9] FROM \nothing (and SELF)
  tta2[0..9] FROM c1 (and SELF)
  l1 FROM \nothing
  l2 FROM \nothing
  l3 FROM alloced_return_gp[bits 0 to 17179869183]
  pl FROM \nothing
  pm1 FROM Tm1{[0][bits 16 to 31]; [1][bits 0 to 15]}
  pm2 FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]}
  qm2 FROM Tm2{[0][bits 16 to 31]; [1][bits 0 to 15]}
  pun FROM c1
  pun2 FROM c1
  qun2 FROM c1; c2 (and SELF)
  esc1 FROM \nothing
  esc2 FROM \nothing
  esc3 FROM \nothing
  esc4 FROM random
  esc5 FROM \nothing
[from] ====== END OF DEPENDENCIES ======
[inout] Out (internal) for function local_escape_1:
          esc1; esc2; esc3; esc4; esc5; local2
[inout] Out (internal) for function origin_arithmetic_1:
          pa1; ta1[0..9]
[inout] Out (internal) for function origin_arithmetic_2:
          pa2; qa2; ta2[0..9]; tta2[0..9]
[inout] Out (internal) for function origin_arithmetic_3:
          pa3; ta3[0..9]
[inout] Out (internal) for function origin_leaf_1:
          l1
[inout] Out (internal) for function origin_misalign_1:
          a; b; pm1
[inout] Out (internal) for function origin_misalign_2:
          a; b; pm2; qm2
[inout] Out (internal) for function origin_uninitialized_1:
          pun; pi
[inout] Out (internal) for function origin_uninitialized_2:
          pun2; qun2; pi
[inout] Out (internal) for function main:
          a; b; p; pa1; pa2; qa2; pa3; q; ta1[0..9]; ta2[0..9]; ta3[0..9];
          tta2[0..9]; l1; l2; l3; pl; pm1; pm2; qm2; pun; pun2; qun2; esc1; esc2;
          esc3; esc4; esc5; tmp