cprover
bmc_util.cpp
Go to the documentation of this file.
1 /*******************************************************************\
2 
3 Module: Bounded Model Checking Utilities
4 
5 Author: Daniel Kroening, Peter Schrammel
6 
7 \*******************************************************************/
8 
11 
12 #include "bmc_util.h"
13 
14 #include <fstream>
15 #include <iostream>
16 
20 
23 #include <goto-symex/slice.h>
25 
27 
29 
30 #include <util/make_unique.h>
31 #include <util/ui_message.h>
32 
34 #include "symex_bmc.h"
35 
37 {
38  log.status() << "Building error trace" << messaget::eom;
39 }
40 
42  goto_tracet &goto_trace,
43  const namespacet &ns,
44  const symex_target_equationt &symex_target_equation,
45  const decision_proceduret &decision_procedure,
46  ui_message_handlert &ui_message_handler)
47 {
48  messaget log(ui_message_handler);
50 
51  build_goto_trace(symex_target_equation, decision_procedure, ns, goto_trace);
52 }
53 
56 {
57  return [property_id](
58  symex_target_equationt::SSA_stepst::const_iterator step,
59  const decision_proceduret &decision_procedure) {
60  return step->is_assert() && step->get_property_id() == property_id &&
61  decision_procedure.get(step->cond_handle).is_false();
62  };
63 }
64 
66  const goto_tracet &goto_trace,
67  const namespacet &ns,
68  const trace_optionst &trace_options,
69  ui_message_handlert &ui_message_handler)
70 {
71  messaget msg(ui_message_handler);
72  switch(ui_message_handler.get_ui())
73  {
75  msg.result() << "Counterexample:" << messaget::eom;
76  show_goto_trace(msg.result(), ns, goto_trace, trace_options);
77  msg.result() << messaget::eom;
78  break;
79 
81  {
82  xmlt xml;
83  convert(ns, goto_trace, xml);
84  msg.status() << xml;
85  }
86  break;
87 
89  {
90  json_stream_objectt &json_result =
91  ui_message_handler.get_json_stream().push_back_stream_object();
92  const goto_trace_stept &step = goto_trace.steps.back();
93  json_result["property"] =
94  json_stringt(step.pc->source_location.get_property_id());
95  json_result["description"] =
96  json_stringt(step.pc->source_location.get_comment());
97  json_result["status"] = json_stringt("failed");
98  json_stream_arrayt &json_trace =
99  json_result.push_back_stream_array("trace");
100  convert<json_stream_arrayt>(ns, goto_trace, json_trace, trace_options);
101  }
102  break;
103  }
104 }
105 
108  const goto_tracet &goto_trace,
109  const namespacet &ns,
110  const optionst &options)
111 {
112  const std::string graphml = options.get_option("graphml-witness");
113  if(graphml.empty())
114  return;
115 
116  graphml_witnesst graphml_witness(ns);
117  graphml_witness(goto_trace);
118 
119  if(graphml == "-")
120  write_graphml(graphml_witness.graph(), std::cout);
121  else
122  {
123  std::ofstream out(graphml);
124  write_graphml(graphml_witness.graph(), out);
125  }
126 }
127 
130  const symex_target_equationt &symex_target_equation,
131  const namespacet &ns,
132  const optionst &options)
133 {
134  const std::string graphml = options.get_option("graphml-witness");
135  if(graphml.empty())
136  return;
137 
138  graphml_witnesst graphml_witness(ns);
139  graphml_witness(symex_target_equation);
140 
141  if(graphml == "-")
142  write_graphml(graphml_witness.graph(), std::cout);
143  else
144  {
145  std::ofstream out(graphml);
146  write_graphml(graphml_witness.graph(), out);
147  }
148 }
149 
151  symex_target_equationt &equation,
152  decision_proceduret &decision_procedure,
153  message_handlert &message_handler)
154 {
155  messaget msg(message_handler);
156  msg.status() << "converting SSA" << messaget::eom;
157 
158  equation.convert(decision_procedure);
159 }
160 
161 std::unique_ptr<memory_model_baset>
162 get_memory_model(const optionst &options, const namespacet &ns)
163 {
164  const std::string mm = options.get_option("mm");
165 
166  if(mm.empty() || mm == "sc")
167  return util_make_unique<memory_model_sct>(ns);
168  else if(mm == "tso")
169  return util_make_unique<memory_model_tsot>(ns);
170  else if(mm == "pso")
171  return util_make_unique<memory_model_psot>(ns);
172  else
173  {
174  throw "invalid memory model '" + mm + "': use one of sc, tso, pso";
175  }
176 }
177 
179  symex_bmct &symex,
180  const namespacet &ns,
181  const optionst &options,
182  ui_message_handlert &ui_message_handler)
183 {
184  messaget msg(ui_message_handler);
185  const symbolt *init_symbol;
186  if(!ns.lookup(INITIALIZE_FUNCTION, init_symbol))
187  symex.language_mode = init_symbol->mode;
188 
189  msg.status() << "Starting Bounded Model Checking" << messaget::eom;
190 
192 
193  symex.unwindset.parse_unwind(options.get_option("unwind"));
194  symex.unwindset.parse_unwindset(options.get_list_option("unwindset"));
195 }
196 
197 void slice(
198  symex_bmct &symex,
199  symex_target_equationt &symex_target_equation,
200  const namespacet &ns,
201  const optionst &options,
202  ui_message_handlert &ui_message_handler)
203 {
204  messaget msg(ui_message_handler);
205 
206  // any properties to check at all?
207  if(symex_target_equation.has_threads())
208  {
209  // we should build a thread-aware SSA slicer
210  msg.statistics() << "no slicing due to threads" << messaget::eom;
211  }
212  else
213  {
214  if(options.get_bool_option("slice-formula"))
215  {
216  ::slice(symex_target_equation);
217  msg.statistics() << "slicing removed "
218  << symex_target_equation.count_ignored_SSA_steps()
219  << " assignments" << messaget::eom;
220  }
221  else
222  {
223  if(options.get_bool_option("simple-slice"))
224  {
225  simple_slice(symex_target_equation);
226  msg.statistics() << "simple slicing removed "
227  << symex_target_equation.count_ignored_SSA_steps()
228  << " assignments" << messaget::eom;
229  }
230  }
231  }
232  msg.statistics() << "Generated " << symex.get_total_vccs() << " VCC(s), "
233  << symex.get_remaining_vccs()
234  << " remaining after simplification" << messaget::eom;
235 }
236 
238  propertiest &properties,
239  std::unordered_set<irep_idt> &updated_properties,
240  const symex_target_equationt &equation)
241 {
242  for(const auto &step : equation.SSA_steps)
243  {
244  if(!step.is_assert())
245  continue;
246 
247  irep_idt property_id = step.get_property_id();
248  CHECK_RETURN(!property_id.empty());
249 
250  // Don't update status of properties that are constant 'false';
251  // we wouldn't have traces for them.
252  const auto status = step.cond_expr.is_true() ? property_statust::PASS
254  auto emplace_result = properties.emplace(
255  property_id, property_infot{step.source.pc, step.comment, status});
256 
257  if(emplace_result.second)
258  {
259  updated_properties.insert(property_id);
260  }
261  else
262  {
263  property_infot &property_info = emplace_result.first->second;
264  property_statust old_status = property_info.status;
265  property_info.status |= status;
266 
267  if(property_info.status != old_status)
268  updated_properties.insert(property_id);
269  }
270  }
271 }
272 
274  propertiest &properties,
275  std::unordered_set<irep_idt> &updated_properties)
276 {
277  for(auto &property_pair : properties)
278  {
279  if(property_pair.second.status == property_statust::NOT_CHECKED)
280  {
281  // This could be a NOT_CHECKED, NOT_REACHABLE or PASS,
282  // but the equation doesn't give us precise information.
283  property_pair.second.status = property_statust::PASS;
284  updated_properties.insert(property_pair.first);
285  }
286  }
287 }
288 
290  propertiest &properties,
291  std::unordered_set<irep_idt> &updated_properties)
292 {
293  for(auto &property_pair : properties)
294  {
295  if(property_pair.second.status == property_statust::UNKNOWN)
296  {
297  // This could have any status except NOT_CHECKED.
298  // We consider them PASS because we do verification modulo bounds.
299  property_pair.second.status = property_statust::PASS;
300  updated_properties.insert(property_pair.first);
301  }
302  }
303 }
304 
306  const std::string &cov_out,
307  const abstract_goto_modelt &goto_model,
308  const symex_bmct &symex,
309  ui_message_handlert &ui_message_handler)
310 {
311  if(
312  !cov_out.empty() &&
313  symex.output_coverage_report(goto_model.get_goto_functions(), cov_out))
314  {
315  messaget log(ui_message_handler);
316  log.error() << "Failed to write symex coverage report to '" << cov_out
317  << "'" << messaget::eom;
318  }
319 }
320 
322  symex_bmct &symex,
323  symex_target_equationt &equation,
324  const optionst &options,
325  const namespacet &ns,
326  ui_message_handlert &ui_message_handler)
327 {
328  // add a partial ordering, if required
329  if(equation.has_threads())
330  {
331  std::unique_ptr<memory_model_baset> memory_model =
332  get_memory_model(options, ns);
333  memory_model->set_message_handler(ui_message_handler);
334  (*memory_model)(equation);
335  }
336 
337  messaget log(ui_message_handler);
338  log.statistics() << "size of program expression: "
339  << equation.SSA_steps.size() << " steps" << messaget::eom;
340 
341  slice(symex, equation, ns, options, ui_message_handler);
342 
343  if(options.get_bool_option("validate-ssa-equation"))
344  {
346  }
347 }
348 
349 std::chrono::duration<double> prepare_property_decider(
350  propertiest &properties,
351  symex_target_equationt &equation,
352  goto_symex_property_decidert &property_decider,
353  ui_message_handlert &ui_message_handler)
354 {
355  auto solver_start = std::chrono::steady_clock::now();
356 
357  messaget log(ui_message_handler);
358  log.status()
359  << "Passing problem to "
360  << property_decider.get_decision_procedure().decision_procedure_text()
361  << messaget::eom;
362 
364  equation, property_decider.get_decision_procedure(), ui_message_handler);
366  properties);
367  property_decider.convert_goals();
368 
369  auto solver_stop = std::chrono::steady_clock::now();
370  return std::chrono::duration<double>(solver_stop - solver_start);
371 }
372 
375  propertiest &properties,
376  goto_symex_property_decidert &property_decider,
377  ui_message_handlert &ui_message_handler,
378  std::chrono::duration<double> solver_runtime,
379  bool set_pass)
380 {
381  auto solver_start = std::chrono::steady_clock::now();
382 
383  messaget log(ui_message_handler);
384  log.status()
385  << "Running "
386  << property_decider.get_decision_procedure().decision_procedure_text()
387  << messaget::eom;
388 
389  property_decider.add_constraint_from_goals(
390  [&properties](const irep_idt &property_id) {
391  return is_property_to_check(properties.at(property_id).status);
392  });
393 
394  decision_proceduret::resultt dec_result = property_decider.solve();
395 
396  property_decider.update_properties_status_from_goals(
397  properties, result.updated_properties, dec_result, set_pass);
398 
399  auto solver_stop = std::chrono::steady_clock::now();
400  solver_runtime += std::chrono::duration<double>(solver_stop - solver_start);
401  log.status() << "Runtime decision procedure: " << solver_runtime.count()
402  << "s" << messaget::eom;
403 
405  {
407  }
408 }
messaget
Class that provides messages with a built-in verbosity 'level'.
Definition: message.h:155
graphml_witnesst::graph
const graphmlt & graph()
Definition: graphml_witness.h:32
dstringt
dstringt has one field, an unsigned integer no which is an index into a static table of strings.
Definition: dstring.h:37
propertiest
std::unordered_map< irep_idt, property_infot > propertiest
A map of property IDs to property infos.
Definition: properties.h:75
symex_target_equation.h
Generate Equation using Symbolic Execution.
update_status_of_unknown_properties
void update_status_of_unknown_properties(propertiest &properties, std::unordered_set< irep_idt > &updated_properties)
Sets the property status of UNKNOWN properties to PASS.
Definition: bmc_util.cpp:289
postprocess_equation
void postprocess_equation(symex_bmct &symex, symex_target_equationt &equation, const optionst &options, const namespacet &ns, ui_message_handlert &ui_message_handler)
Post process the equation.
Definition: bmc_util.cpp:321
message_building_error_trace
void message_building_error_trace(messaget &log)
Outputs a message that an error trace is being built.
Definition: bmc_util.cpp:36
property_statust
property_statust
The status of a property.
Definition: properties.h:25
build_goto_trace
void build_goto_trace(const symex_target_equationt &target, ssa_step_predicatet is_last_step_to_keep, const decision_proceduret &decision_procedure, const namespacet &ns, goto_tracet &goto_trace)
Build a trace by going through the steps of target and stopping after the step matching a given condi...
Definition: build_goto_trace.cpp:204
output_graphml
void output_graphml(const goto_tracet &goto_trace, const namespacet &ns, const optionst &options)
outputs an error witness in graphml format
Definition: bmc_util.cpp:107
ui_message_handlert
Definition: ui_message.h:20
ssa_step_predicatet
std::function< bool(symex_target_equationt::SSA_stepst::const_iterator, const decision_proceduret &)> ssa_step_predicatet
Definition: build_goto_trace.h:49
incremental_goto_checkert::resultt
Definition: incremental_goto_checker.h:41
memory_model_pso.h
Memory models for partial order concurrency.
ui_message_handlert::uit::XML_UI
@ XML_UI
symex_bmct::unwindset
unwindsett unwindset
Definition: symex_bmc.h:86
optionst
Definition: options.h:23
irept::make_nil
void make_nil()
Definition: irep.h:475
CHECK_RETURN
#define CHECK_RETURN(CONDITION)
Definition: invariant.h:496
optionst::get_option
const std::string get_option(const std::string &option) const
Definition: options.cpp:67
messaget::status
mstreamt & status() const
Definition: message.h:414
decision_proceduret
Definition: decision_procedure.h:21
update_status_of_not_checked_properties
void update_status_of_not_checked_properties(propertiest &properties, std::unordered_set< irep_idt > &updated_properties)
Sets the property status of NOT_CHECKED properties to PASS.
Definition: bmc_util.cpp:273
unwindsett::parse_unwindset
void parse_unwindset(const std::string &unwindset)
Definition: unwindset.cpp:57
goto_tracet::steps
stepst steps
Definition: goto_trace.h:174
goto_symex_property_decider.h
Property Decider for Goto-Symex.
simple_slice
void simple_slice(symex_target_equationt &equation)
Definition: slice.cpp:237
incremental_goto_checkert::resultt::progresst::FOUND_FAIL
@ FOUND_FAIL
The goto checker may be able to find another FAILed property if operator() is called again.
messaget::eom
static eomt eom
Definition: message.h:297
goto_symex_property_decidert::solve
decision_proceduret::resultt solve()
Calls solve() on the solver instance.
Definition: goto_symex_property_decider.cpp:102
goto_trace_stept
Step of the trace of a GOTO program.
Definition: goto_trace.h:50
decision_procedure.h
Decision Procedure Interface.
unwindsett::parse_unwind
void parse_unwind(const std::string &unwind)
Definition: unwindset.cpp:18
ui_message_handlert::get_ui
virtual uit get_ui() const
Definition: ui_message.h:31
json_stream_objectt::push_back_stream_array
json_stream_arrayt & push_back_stream_array(const std::string &key)
Add a JSON array stream for a specific key.
Definition: json_stream.cpp:120
decision_proceduret::resultt::D_SATISFIABLE
@ D_SATISFIABLE
symex_bmct::output_coverage_report
bool output_coverage_report(const goto_functionst &goto_functions, const std::string &path) const
Definition: symex_bmc.h:76
namespacet
A namespacet is essentially one or two symbol tables bound together, to allow for symbol lookups in t...
Definition: namespace.h:92
ui_message_handlert::get_json_stream
virtual json_stream_arrayt & get_json_stream()
Definition: ui_message.h:38
bmc_util.h
Bounded Model Checking Utilities.
property_infot::status
property_statust status
The status of the property.
Definition: properties.h:71
namespacet::lookup
bool lookup(const irep_idt &name, const symbolt *&symbol) const override
See documentation for namespace_baset::lookup().
Definition: namespace.cpp:140
build_error_trace
void build_error_trace(goto_tracet &goto_trace, const namespacet &ns, const symex_target_equationt &symex_target_equation, const decision_proceduret &decision_procedure, ui_message_handlert &ui_message_handler)
Definition: bmc_util.cpp:41
convert
static bool convert(const irep_idt &identifier, const std::ostringstream &s, symbol_tablet &symbol_table, message_handlert &message_handler)
Definition: builtin_factory.cpp:42
update_properties_status_from_symex_target_equation
void update_properties_status_from_symex_target_equation(propertiest &properties, std::unordered_set< irep_idt > &updated_properties, const symex_target_equationt &equation)
Sets property status to PASS for properties whose conditions are constant true in the equation.
Definition: bmc_util.cpp:237
symbolt::mode
irep_idt mode
Language mode.
Definition: symbol.h:49
messaget::result
mstreamt & result() const
Definition: message.h:409
make_unique.h
messaget::error
mstreamt & error() const
Definition: message.h:399
xml
xmlt xml(const irep_idt &property_id, const property_infot &property_info)
Definition: properties.cpp:105
ui_message_handlert::uit::JSON_UI
@ JSON_UI
goto_symex_property_decidert::convert_goals
void convert_goals()
Convert the instances of a property into a goal variable.
Definition: goto_symex_property_decider.cpp:72
xml_goto_trace.h
Traces of GOTO Programs.
goto_symext::validate
void validate(const validation_modet vm) const
Definition: goto_symex.h:843
slice
void slice(symex_bmct &symex, symex_target_equationt &symex_target_equation, const namespacet &ns, const optionst &options, ui_message_handlert &ui_message_handler)
Definition: bmc_util.cpp:197
json_stream_arrayt
Provides methods for streaming JSON arrays.
Definition: json_stream.h:93
goto_trace_stept::pc
goto_programt::const_targett pc
Definition: goto_trace.h:112
INITIALIZE_FUNCTION
#define INITIALIZE_FUNCTION
Definition: static_lifetime_init.h:23
get_memory_model
std::unique_ptr< memory_model_baset > get_memory_model(const optionst &options, const namespacet &ns)
Definition: bmc_util.cpp:162
is_property_to_check
bool is_property_to_check(property_statust status)
Return true if the status is NOT_CHECKED or UNKNOWN.
Definition: properties.cpp:168
convert_symex_target_equation
void convert_symex_target_equation(symex_target_equationt &equation, decision_proceduret &decision_procedure, message_handlert &message_handler)
Definition: bmc_util.cpp:150
messaget::set_message_handler
virtual void set_message_handler(message_handlert &_message_handler)
Definition: message.h:179
goto_symex_property_decidert::get_decision_procedure
decision_proceduret & get_decision_procedure() const
Returns the solver instance.
Definition: goto_symex_property_decider.cpp:108
property_statust::NOT_CHECKED
@ NOT_CHECKED
The property was not checked (also used for initialization)
message_handlert
Definition: message.h:28
dstringt::empty
bool empty() const
Definition: dstring.h:88
json_goto_trace.h
Traces of GOTO Programs.
graphml_witness.h
Witnesses for Traces and Proofs.
goto_symex_property_decidert::add_constraint_from_goals
void add_constraint_from_goals(std::function< bool(const irep_idt &property_id)> select_property)
Add disjunction of negated selected properties to the equation.
Definition: goto_symex_property_decider.cpp:83
xmlt
Definition: xml.h:21
decision_proceduret::resultt
resultt
Result of running the decision procedure.
Definition: decision_procedure.h:44
symex_target_equationt::has_threads
bool has_threads() const
Definition: symex_target_equation.h:277
symex_target_equationt
Inheriting the interface of symex_targett this class represents the SSA form of the input program as ...
Definition: symex_target_equation.h:41
property_statust::UNKNOWN
@ UNKNOWN
The checker was unable to determine the status of the property.
goto_symex_property_decidert::update_properties_goals_from_symex_target_equation
void update_properties_goals_from_symex_target_equation(propertiest &properties)
Get the conditions for the properties from the equation and collect all 'instances' of the properties...
Definition: goto_symex_property_decider.cpp:44
json_stream_arrayt::push_back_stream_object
json_stream_objectt & push_back_stream_object()
Add a JSON object child stream.
Definition: json_stream.cpp:82
run_property_decider
void run_property_decider(incremental_goto_checkert::resultt &result, propertiest &properties, goto_symex_property_decidert &property_decider, ui_message_handlert &ui_message_handler, std::chrono::duration< double > solver_runtime, bool set_pass)
Runs the property decider to solve the equation.
Definition: bmc_util.cpp:373
decision_proceduret::decision_procedure_text
virtual std::string decision_procedure_text() const =0
Return a textual description of the decision procedure.
json_stream_objectt
Provides methods for streaming JSON objects.
Definition: json_stream.h:140
symex_target_equationt::count_ignored_SSA_steps
std::size_t count_ignored_SSA_steps() const
Definition: symex_target_equation.h:248
abstract_goto_modelt::get_goto_functions
virtual const goto_functionst & get_goto_functions() const =0
Accessor to get a raw goto_functionst.
ssa_step_matches_failing_property
ssa_step_predicatet ssa_step_matches_failing_property(const irep_idt &property_id)
Returns a function that checks whether an SSA step is an assertion with property_id.
Definition: bmc_util.cpp:55
property_infot
Definition: properties.h:58
write_graphml
bool write_graphml(const graphmlt &src, std::ostream &os)
Definition: graphml.cpp:209
show_goto_trace
void show_goto_trace(messaget::mstreamt &out, const namespacet &ns, const goto_tracet &goto_trace, const trace_optionst &options)
Output the trace on the given stream out.
Definition: goto_trace.cpp:767
goto_symext::language_mode
irep_idt language_mode
language_mode: ID_java, ID_C or another language identifier if we know the source language in use,...
Definition: goto_symex.h:239
ui_message_handlert::uit::PLAIN
@ PLAIN
trace_optionst
Options for printing the trace using show_goto_trace.
Definition: goto_trace.h:215
setup_symex
void setup_symex(symex_bmct &symex, const namespacet &ns, const optionst &options, ui_message_handlert &ui_message_handler)
Definition: bmc_util.cpp:178
symbolt
Symbol table entry.
Definition: symbol.h:28
goto_symex_property_decidert::update_properties_status_from_goals
void update_properties_status_from_goals(propertiest &properties, std::unordered_set< irep_idt > &updated_properties, decision_proceduret::resultt dec_result, bool set_pass=true) const
Update the property status from the truth value of the goal variable.
Definition: goto_symex_property_decider.cpp:124
symex_target_equationt::SSA_steps
SSA_stepst SSA_steps
Definition: symex_target_equation.h:257
optionst::get_bool_option
bool get_bool_option(const std::string &option) const
Definition: options.cpp:44
symex_target_equationt::convert
void convert(decision_proceduret &decision_procedure)
Interface method to initiate the conversion into a decision procedure format.
Definition: symex_target_equation.cpp:347
build_goto_trace.h
Traces of GOTO Programs.
output_coverage_report
void output_coverage_report(const std::string &cov_out, const abstract_goto_modelt &goto_model, const symex_bmct &symex, ui_message_handlert &ui_message_handler)
Output a coverage report as generated by symex_coveraget if cov_out is non-empty.
Definition: bmc_util.cpp:305
output_error_trace
void output_error_trace(const goto_tracet &goto_trace, const namespacet &ns, const trace_optionst &trace_options, ui_message_handlert &ui_message_handler)
Definition: bmc_util.cpp:65
goto_tracet
Trace of a GOTO program.
Definition: goto_trace.h:171
goto_symex_property_decidert
Provides management of goal variables that encode properties.
Definition: goto_symex_property_decider.h:24
incremental_goto_checkert::resultt::progress
progresst progress
Definition: incremental_goto_checker.h:52
property_statust::PASS
@ PASS
The property was not violated.
incremental_goto_checkert::resultt::updated_properties
std::unordered_set< irep_idt > updated_properties
Changed properties since the last call to incremental_goto_checkert::operator()
Definition: incremental_goto_checker.h:59
abstract_goto_modelt
Abstract interface to eager or lazy GOTO models.
Definition: abstract_goto_model.h:21
symex_bmct
Definition: symex_bmc.h:26
static_lifetime_init.h
prepare_property_decider
std::chrono::duration< double > prepare_property_decider(propertiest &properties, symex_target_equationt &equation, goto_symex_property_decidert &property_decider, ui_message_handlert &ui_message_handler)
Converts the equation and sets up the property decider, but does not call solve.
Definition: bmc_util.cpp:349
graphml_witnesst
Definition: graphml_witness.h:22
goto_symext::get_total_vccs
unsigned get_total_vccs() const
Definition: goto_symex.h:825
slice.h
Slicer for symex traces.
property_infot::pc
goto_programt::const_targett pc
A pointer to the corresponding goto instruction.
Definition: properties.h:65
symex_bmct::last_source_location
source_locationt last_source_location
Definition: symex_bmc.h:37
symex_bmc.h
Bounded Model Checking for ANSI-C.
optionst::get_list_option
const value_listt & get_list_option(const std::string &option) const
Definition: options.cpp:80
validation_modet::INVARIANT
@ INVARIANT
messaget::statistics
mstreamt & statistics() const
Definition: message.h:419
goto_symext::get_remaining_vccs
unsigned get_remaining_vccs() const
Definition: goto_symex.h:834
json_stringt
Definition: json.h:270
ui_message.h