-
I was just going through the `uclid.smt` patches that I have lying around and I found one that might be interesting to the broader community.
It deals with a negative `value` in the `BitVectorLit` cl…
ekiwi updated
4 years ago
-
It seems that array and bitvec can not reason togeter? If I want to reason a array of bitvec, how to do that? thanks~
-
Hi, for the following formula
~~~~
(set-logic NIA)
(set-option :proof true)
(set-option :smt.mbqi false)
(declare-const v4 Bool)
(declare-const i7 Int)
(assert (not (forall ((q3 Int) (q4 Bool…
-
Hi, for the following instance,
[uaf504.txt](https://github.com/Z3Prover/z3/files/4360904/uaf504.txt)
asan detects uaf in z3 master branch (Commit 37bc4a4)
~~~~
==60796==ERROR: AddressSanitizer:…
-
Hi,
For this case, Z3 throws out a segmentation fault:
```
[559] % z3-4.8.7 small.smt2
unsat
[560] % z3 small.smt2
ASSERTION VIOLATION
File: ../src/ast/ast.h
Line: 491
m_ref_count > 0
(C)ontinue, (A)…
-
Hi,
For this case, Z3 throws out a segmentation fault:
```
[876] % z3 small.smt2
Segmentation fault
[877] % z3release small.smt2
unknown
[878] % z3san small.smt2
ASAN:DEADLYSIGNAL
===================…
-
Hi, for the following instance,
[dynack.txt](https://github.com/Z3Prover/z3/files/4357806/dynack.txt)
asan detects uaf in z3 master branch (Commit 37bc4a4)
~~~~
==136535==ERROR: AddressSanitizer…
-
Hi, for the following formula
~~~~
(set-logic NRA)
(declare-const r3 Real)
(declare-const r16 Real)
(assert (not (exists ((q7 Real) (q8 Bool) (q9 Real)) (< r3 r16))))
(check-sat-using (then add-…
-
Hi, for the following formula
~~~~
(set-logic HORN)
(set-option :smt.core.minimize true)
(set-option :fp.xform.fix_unbound_vars true)
(assert (forall ((q7 (_ BitVec 10)) (q8 (_ BitVec 10)) (q9 (_…
-
Recently, we observed that Boogie seems to silently drop Z3 options when they are passed to it using lower-case letters, as in `/z3opt:smt.mbqi=true`. We tracked this behavior to this interesting piec…