DonggeLiu / Legion

A coverage-based software testing tool
MIT License
29 stars 4 forks source link

SV-Bechmarks #11

Closed DonggeLiu closed 4 years ago

DonggeLiu commented 5 years ago
  1. Not sure if Legion works on it properly;
  2. Not sure if we can run other baselines (e.g. DFS.py) on it
  3. Any baselines that have been tested in SV-COMP also use ANGR?
gernst commented 4 years ago

TODO:

gernst commented 4 years ago

Note: Legion stopping to explore further paths is related to the claripy.errors.BackendError: unexpected type <class 'NotImplementedType'> Furthermore, this issue is not related to instrumentation and also not to the way we use Angr.

gernst commented 4 years ago

Ok it turns out that the code to find states of white nodes by symbolic execution does not match addresses right in all cases, causing it to miss the white node and to symbolically exectute up to the end of the program (which is taking very long for N = 100000 in some sv-benchmarks)

DonggeLiu commented 4 years ago

Pretty sure Legion is compatible with the TestComp framework now:

  1. It did well in the competition
  2. We are able to reproduce similar results on the local server.