-
The `fp.min` and `fp.max` operations of the SMTLib2 theory of IEEE 754 arithmetic are underspecified WTR to the result when passed in two zeros (of potentially differing signs). The actual IEEE spec …
-
Hi, for the following formula, z3 (commit ed92b84) throws a uaf,
~~~~
(declare-const i0 Int)
(declare-const Str14 String)
(assert (>= (str.len Str14) i0))
(push 1)
(assert (>= 0 (abs i0)))
(pop…
-
Hi, I'm wondering if there is any way to convert a float to string in z3, just like what int.to.str did?
-
**SEGV ../src/sat/smt/bv_invariant.cpp:63**
Hi, for the following formula,
z3 4c4810c6113a
~~~~
(set-option :model_validate true)
(declare-fun bv_28-0 () (_ BitVec 1))
(minimize bv_28-0)
(che…
-
It seems the Haskell backend crashes with `Error (ErrorDecidePredicateUnknown)` when Z3 returns `unknown` and the prover can't proceed because of it. This means that certain tricky (non-linear) integ…
-
The following formula returns `sat` because the `int.to.str` operation on a negative integer results in the empty string:
```
(assert (= "" (int.to.str (- 1))))
(check-sat)
```
This is the ca…
-
Even after a simple type checking, there are a number of ways in which specs can be malformed, possibly leading to crashes in different prover back ends.
There are a few checks that I think can be …
-
Hi ! It's me again with arrays, sorry.
When I declare an array, use it, and then do a "forall" it generates a "wrong" formula for Z3. But if I don't use the array (or if I use sFunArray instead of …
-
To reproduce:
Use this Kore version:
```
Kore version 0.36.0.0
Git:
revision: 73b95255df53d54b499b61c370f262ec327842e2
branch: HEAD
last commit: 2021 Jan 6 17:18:37 -0600
```
In the…
-
Hey Levent,
I finally have some time to try and improve some of the general performance characteristics of `sbv` as we briefly touched on in #460. But before investing significant time looking at t…