469 Commits (834260d43fb5bc52f48758347881332858bf8525)

Author SHA1 Message Date
Josh Berdine 2331e8d68a [sledge] Fix frontend bug in trampoline creation
5 years ago
Josh Berdine 995de071ed [sledge] Revise Sh_domain handling of function call and return
5 years ago
Josh Berdine df26b9b1a5 [sledge][NFC] Minor code simplification
5 years ago
Josh Berdine 65e963a162 [sledge] Add Sh.subst implemented ito and and exists
5 years ago
Josh Berdine 1595fb7c60 [sledge] Fix potential name clash in Sh.rename
5 years ago
Josh Berdine 799b21761f [sledge] Translate ExtractElement and InsertElement despite being vector
5 years ago
Jules Villard 42470d8809 [hmm] sexp_{option,list} -> {option,list}
5 years ago
Josh Berdine ef78ba83cf [sledge] Report the number of alarms
5 years ago
Josh Berdine ec52c05c30 [sledge][NFC] Minor simplification for singleton sets
5 years ago
Josh Berdine 239d906ab6 [sledge] Improve tracing and debugging support
5 years ago
Josh Berdine 3f5adecdcf [sledge] Exec.exec_specs missed vocabulary extension
5 years ago
Josh Berdine 9ac854c970 [sledge] Exec.kill should preserve vocabulary
5 years ago
Josh Berdine b2f90a3994 [sledge] Treat freturn directly in Dom.call
5 years ago
Josh Berdine fbf0fe2f1a [sledge][NFC] Rename args to actuals
5 years ago
Josh Berdine d3d0c4b36e [sledge][NFC] Rename params to formals
5 years ago
Josh Berdine 69c29ab3d8 [sledge][NFC] Label args of Domain.call
5 years ago
Josh Berdine 47766a0e6e [sledge] Drop globals with appending linkage and size 0
5 years ago
Josh Berdine 1efd0df035 [sledge] Avoid potential name clash between trampolines
5 years ago
Josh Berdine 38cab376f6 [sledge] Keep BitCasts and similar in expressions
5 years ago
Josh Berdine b632d4f283 [sledge] Check the input datalayout agrees with assumptions
5 years ago
Josh Berdine 6328a6ce40 [sledge] Do not store size of globals separately
5 years ago
Josh Berdine ca95fc098f [sledge] Keep size in both bits and bytes for each type
5 years ago
Josh Berdine d3bad1ce44 [sledge] Add sizes to types
5 years ago
Josh Berdine 6120b7d098 [sledge] Use the configured margin when formatting failure messages
5 years ago
Josh Berdine a386b36616 [sledge] Re-add Splat expression for zero-initialized aggregates
5 years ago
Josh Berdine 727385d853 [sledge] Relax Typ.is_sized to allow opaque types
5 years ago
Josh Berdine f804220cd2 [sledge] Revise order of Term constructors for polynomial normalization
5 years ago
Josh Berdine 1ef390ffca [sledge] Relax Exp type-checking to be modulo-casting
5 years ago
Josh Berdine fb184a6a1d [sledge] Introduce the notion of types having the same semantics
5 years ago
Josh Berdine 917cc62e28 [sledge] Fix type of functions called using a cast
5 years ago
Josh Berdine ce3252c348 [sledge] Allow global variables as function names
5 years ago
Josh Berdine 785928c77e [sledge] Error reporting improvements
5 years ago
Josh Berdine ffeef16aae [sledge] Add a flag to disable internalization
5 years ago
Josh Berdine 6ca09b14fd [sledge] Add flag to disable linking in the models
5 years ago
Josh Berdine f699c9b9a8 [sledge] Simplify ¬¬e to e
5 years ago
Josh Berdine 06f2863dd8 [sledge] Simplify `e xor e` to `0`
5 years ago
Josh Berdine 6f84787b19 [sledge] Change exec_inst to return an option instead of a result
5 years ago
Josh Berdine 2840eb4781 [sledge] Refactor dispatch on instruction from Exec to Sh_domain
5 years ago
Josh Berdine c6d7886fd8 [sledge] Make type of exec_move consistent with move instruction
5 years ago
Josh Berdine 162f027249 [sledge] Make type argument of Exp constructors optional where computable
5 years ago
Josh Berdine ad5d5dd89e [sledge] Add Exp.true_ and Exp.false_
5 years ago
Josh Berdine 37d1904bd3 [sledge] Move check for whether a variable is global from Reg to Var
5 years ago
Josh Berdine 3003a8e646 [sledge] NFC minor cleanups
5 years ago
Josh Berdine 8ee0c67d1f [sledge] Precompute the Term form of each Exp, and add it to Exp.t
5 years ago
Josh Berdine 9ddfae4e89 [sledge] Change Term.rename to preserve sharing in cyclic records
5 years ago
Josh Berdine 7ecd091ff3 [sledge] Change Struct_rec to a generic n-ary recursive application
5 years ago
Josh Berdine 356b4f0b4e [sledge] Uncurry Record term constructor
5 years ago
Josh Berdine 99b60d191a [sledge] Fix sorting of heap block subformulas when printing
5 years ago
Josh Berdine 1228c8e31b [sledge] Uncurry Update term constructor, and specialize index to int
5 years ago
Josh Berdine 09daac754c [sledge] Uncurry Select term constructor, and specialize index to int
5 years ago
Josh Berdine 5eaae07043 [sledge] Change Concat term contructor to a generic n-ary application
5 years ago
Josh Berdine 6cd82475f1 [sledge] Use generic binary application for Splat and Memory term constructors
5 years ago
Josh Berdine 6805da9557 [sledge] Uncurry ternary term constructors
5 years ago
Josh Berdine 167e489e24 [sledge] Uncurry binary term constructors
5 years ago
Josh Berdine 8b9d4ba066 [sledge] Uncurry unary term constructors
5 years ago
Josh Berdine e87a0533be [sledge] Minor simplification of polynomial representation
5 years ago
Josh Berdine 3bbb05216f [sledge] Remove the redundancy of both < and >= terms
5 years ago
Josh Berdine a3506f995c [sledge] Simplify arithmetic terms due to not needing type
5 years ago
Josh Berdine 471d296266 [sledge] Fix check for range of representable integers
5 years ago
Josh Berdine c440c4fc28 [sledge] Remove unsigned Term operations except Extract
5 years ago
Josh Berdine e84f3fcf0f [sledge] Add Extract term
5 years ago
Josh Berdine 5753f9b26a [sledge] Rename clamp to extract
5 years ago
Josh Berdine d7ef03cf02 [sledge] Revise and fix unsigned conversions
5 years ago
Josh Berdine 7f2165484b [sledge] Do not special case boolean vs bitwise operations
5 years ago
Josh Berdine 8abfcfb504 [sledge] Simplify normalization of shift operations
5 years ago
Josh Berdine e3f0ba8c54 [sledge] Revise program expressions
5 years ago
Josh Berdine 00639e15bb [sledge] Delay normalization of xor to equality
5 years ago
Josh Berdine 0e4110fc5c [sledge] Normalize xor and equality based on type instead of bitwidth
5 years ago
Josh Berdine 0903355a0e [sledge] Remove unused Exp constructors for memory exps
5 years ago
Josh Berdine 3b03022b5e [sledge] Remove redundant Reg.id
5 years ago
Josh Berdine 310d00f380 [sledge] Remove dead code in Exp and Term
5 years ago
Josh Berdine 442c8e92f4 [sledge] Distinguish program expressions and formula terms
5 years ago
Josh Berdine 13c06e4dd3 [sledge] Move generation of formal return and throw parameters to frontend
5 years ago
Josh Berdine 0c04ecc9aa [sledge] Change Llair representation of functions to a String map
5 years ago
Josh Berdine 6aaeaba104 [sledge] Move ops on signed 1-bit Z integers to import
5 years ago
Josh Berdine ed733f0247 [sledge] Add missing import of trace into symbheap
5 years ago
Josh Berdine 1fdc76d163 [sledge] Rename State_domain back to Sh_domain
5 years ago
Benno Stein 7ec2830d92 [sledge] Only merge worklist states that share a calling context
5 years ago
Benno Stein e44827b892 [sledge] Add option to apply used-globals as pre-analysis
5 years ago
Benno Stein 1ab8359bc0 [sledge] fix bug spuriously marking a register as global variable
5 years ago
Benno Stein 637fff5247 [sledge] Check for intrinsic calls in used-globals analysis
5 years ago
Benno Stein 6592eb609f [sledge] Add option to skip recursive calls at depth bound
5 years ago
Benno Stein 00a5d3dd64 [sledge] Account for callees in used-globals analysis
5 years ago
Josh Berdine c131e2e669 [sledge] Use dune's Build_info for version reporting
5 years ago
Benno Stein 47f314c00e [sledge] Add used-globals abstract domain and transfer functions
5 years ago
Benno Stein 3dc0c5938f [sledge] Extract relational logic from Sh_domain, create "domain" module
5 years ago
Benno Stein 2acb1c3dee [sledge] Functorize worklist, separate out domain-specific logic
5 years ago
Josh Berdine 13fb57ec62 [sledge] Revise llvm to llair translation to avoid code duplication
5 years ago
Josh Berdine ed4aac4f66 [sledge] Update stale comment
5 years ago
Josh Berdine 0667edf418 [sledge] Remove unused Llair.ignore_result
5 years ago
Josh Berdine 3f8d5ace6e [sledge] Eliminate SSA
5 years ago
Josh Berdine b6eab89504 [sledge] Remove dead from_call.actuals_to_formals field
5 years ago
Josh Berdine 8d9b8962c7 [sledge] Add Move instruction
5 years ago
Josh Berdine 2c9fce0bf2 [sledge] Add Vector.unzip
5 years ago
Josh Berdine 0790a64763 [sledge] Change symbolic execution of instructions to not rely on SSA
5 years ago
Josh Berdine 7efc9285cb [sledge] Fix type of Exp.rename
5 years ago
Josh Berdine 0895246e4f [sledge] Remove label on ~opts args in Control
5 years ago
Timotej Kapus afb6a4fd11 [sledge] Fix internalization
5 years ago
Timotej Kapus c8d1da1e0d [sledge] Fix __llair_alloc
5 years ago
Timotej Kapus 6c9e4e52c6 [sledge][summaries] Fix unsoundes due to missing frame
5 years ago
Josh Berdine 7f423f7fa1 [sledge] Model `folly::usingJEMalloc()`
5 years ago
Josh Berdine 4bbe05698e [sledge] Remove `.<int>` suffix when looking up modeled function names
5 years ago
Josh Berdine 0126b64d16 [sledge] Explicate output flag of disassemble command
5 years ago
Josh Berdine 9865bc0f74 [sledge] [solver] Strengthen handling of existential subtrahends
5 years ago
Timotej Kapus b5dea36c5e [sledge] Add global merge pass
5 years ago
Timotej Kapus 5882c49d7d [sledge] Disable creating of summaries when summaries disabled
5 years ago
Timotej Kapus ba6e6bf369 [sledge] Actually use function summaries
5 years ago
Timotej Kapus c0c6d65d45 [sledge] Generate and apply summaries
5 years ago
Timotej Kapus 8173eedf1f [sledge] Fix solver crash
5 years ago
Timotej Kapus b5b8259ea7 [sledge] Add printing of some variables in bold
6 years ago
Timotej Kapus c5f261e977 [sledge] [summaries] Fix variable naming bugs
6 years ago
Timotej Kapus b25f735c6e [sledge] Fix Exp.map and garbage_collect
6 years ago
Timotej Kapus 38e66d6f91 [sledge] [summaries] Fix issues with multiple calls
6 years ago
Josh Berdine 1908077aa9 [sledge] Include alarms in debug trace
6 years ago
Josh Berdine b8065e9b62 [sledge] Model __cxa_allocate_exception as unreachable with -skip-throw
6 years ago
Josh Berdine bcc6e1ecc9 [sledge] Support intrinsics which do not return
6 years ago
Josh Berdine 8f765bf742 [sledge] Add -margin flag for debug tracing output
6 years ago
Josh Berdine d42908a5ff [sledge] Add dbg-opt build mode
6 years ago
Josh Berdine ddc1a028c4 [sledge] Manually set exception backtrace recording
6 years ago
Josh Berdine 8be5dbec0b [sledge] Revise Report printing
6 years ago
Josh Berdine 4c6ea0c887 [sledge] Use standard "libFuzzer" name
6 years ago
Timotej Kapus e15a1d36a5 [sledge] Add data structure to hold summaries
6 years ago
Josh Berdine 03e338b2b9 [sledge] Give more specific names to `-output` flags
6 years ago
Josh Berdine 39fe848146 [sledge] Define `sledge buck link` in terms of `sledge buck bitcode`
6 years ago
Josh Berdine 26a34bc33c [sledge] Do not always output list of bitcode inputs
6 years ago
Josh Berdine b8bd639ad8 [sledge] Generate and commit cli help
6 years ago
Timotej Kapus fc6aee2d06 [sledge] Function summarisation: maybe summaries
6 years ago
Timotej Kapus 5df12c7725 [sledge] Add lib-fuzzer to buck analyze
6 years ago
Timotej Kapus 0ab1223d3d [sledge] Function summarization: solver can show pre
6 years ago
Timotej Kapus 4ac252120b [sledge] special case buck-target-patterns
6 years ago
Josh Berdine a58bc25aa5 [sledge] Strengthen simplification of convert Exps
6 years ago
Timotej Kapus 6949a5ee68 [sledge] Add a todo for calls with inttoptr
6 years ago
Josh Berdine b14580d88b [sledge] Move locals from blocks to functions
6 years ago
Timotej Kapus 86e12cb1a3 [sledge] Add missing llvm passes to frontend.ml
6 years ago
Josh Berdine 330b266d28 [sledge] Rework function return value passing
6 years ago
Timotej Kapus 01e6c5c558 [sledge] [solver] add handling of trivial equality
6 years ago
Timotej Kapus a75a50215b [sledge] Add LLVM passes that reduce bitcode size
6 years ago
Timotej Kapus 1614f78f6d [sledge] Add a harness for lionhead fuzzers
6 years ago
Timotej Kapus 46f5667823 [sledge] Relax call instruction arguments
6 years ago
Timotej Kapus 551a03c4c9 [sledge] Simplify the printed symbolic heaps
6 years ago
Josh Berdine cfc1c8be36 [copyright] Remove years
6 years ago
Timotej Kapus 5a92171b26 [sledge] Print pre/post on function return
6 years ago
Timotej Kapus 0f61a97feb [sledge] Add non-failling alloc intrinsic
6 years ago
Timotej Kapus ad035a4cc7 [sledge] Fix handling of bitcasts in call instr
6 years ago
Josh Berdine 12bab4b16b [sledge] Add formal parameters to functions for return values
6 years ago
Josh Berdine 2440ee69ae [sledge] Preserve sharing of Func.parent
6 years ago
Timotej Kapus 2d69e17d51 [sledge] Add CL option to disable exceptions
6 years ago
Josh Berdine a0949495c1 [sledge] Translate `invoke abort` to `abort`
6 years ago
Josh Berdine f3bee3f513 [sledge] Print locations of globals in textual LLAIR
6 years ago
Josh Berdine d104f5e518 [sledge] Extend Exp.typ to binary and ternary ops
6 years ago
Timotej Kapus 65f3b10c99 [sledge] Fix crashing frontned
6 years ago
Timotej Kapus 9ef992394c [sledge] Put all the entry points in the config
6 years ago
Timotej Kapus b9ba97a2fd [sledge] Add globalopt pass to remove globals
6 years ago
Josh Berdine 4ea2cf9814 [sledge] Improve uncaught exceptions
6 years ago
Josh Berdine 6a2da2acc4 [sledge] Rework command line interface
6 years ago
Josh Berdine 9c277e9732 [sledge] Simplify Llair.pp
6 years ago
Timotej Kapus c8b063fb50 [sledge] Fix ~predicate label
6 years ago
Timotej Kapus cdd444b901 [sledge] Update internalize to handle other mains
6 years ago
Timotej Kapus e45a05a574 [sledge] fix LLVM assertion failure in xlate_global
6 years ago
Timotej Kapus 881a4d10af [sledge] Fix bound not bounding recursion
6 years ago
Josh Berdine 1e7b13bdcd [sledge] Add printers for some LLVM enums
6 years ago
Josh Berdine babe25fd29 [sledge] Fix translation of global initializers
6 years ago
Josh Berdine 00c5e1b9fe [sledge] Fix size in translation of global variables
6 years ago
Josh Berdine 62a3187f5d [sledge] Don't call Llvm.dispose_context as it leads to crashes in GC
6 years ago
Josh Berdine 14a15931f7 [sledge] Combine name and loc tables into one
6 years ago
Josh Berdine ccd2a92ba5 [sledge] Avoid Format in non-debug code
6 years ago
Josh Berdine d5c2468007 [sledge] Combine scan_locs and scan_names into a single pass
6 years ago
Josh Berdine 4d5970f693 [sledge] Only call Llvm_analysis.verify_module in debug mode
6 years ago
Josh Berdine da097679bd [sledge] Fix crash when trying to warn
6 years ago
Josh Berdine 611fb57d3a [sledge] Treat .bc or .ll input files as pre-linked bitcode
6 years ago
Josh Berdine 7ac04fa46a [sledge] Optimize finding functions by name
6 years ago
Timotej Kapus d37374dd8c [sledge] change input format
6 years ago
Josh Berdine 139a3d3e00 [sledge] Avoid calling Llvm.string_of_llvalue on instructions
6 years ago
Josh Berdine a3e7107969 [sledge] Optimize variable renaming in symbolic heaps
6 years ago
Josh Berdine e391a8a9b2 [sledge] Simplify Equality.map_exps
6 years ago
Josh Berdine c4707621ea [sledge] Make execution bound part of the work queue
6 years ago
Josh Berdine dda922b6ad [sledge] Add command line option for execution bound
6 years ago
Josh Berdine 889b874f63 [sledge] Optimize equality solver treatment of atomic exps
6 years ago
Josh Berdine 0cbcb878f9 [sledge] Classify fully-interpreted and simplified exps differently
6 years ago
Josh Berdine c690416622 [sledge][NFC] Simplify harness selection code
6 years ago
Timotej Kapus d47824fe37 [sledge] link in cxxabi
6 years ago
Timotej Kapus 22acf72936 [sledge] fix only-needed
6 years ago
Josh Berdine cb6d02fe32 [sledge] Add Frontend.report_undefined
6 years ago
Josh Berdine 4ece75ace9 [sledge] Add abort instruction and use it for abort and llvm.trap
6 years ago
Josh Berdine 8f0c88cc68 [sledge] Translate aligned operator new and delete
6 years ago
Josh Berdine f64fc6e32e [sledge] Improve frontend warnings
6 years ago
Josh Berdine c8943f946c [sledge] Change type of warn to be consistent with fail
6 years ago
Josh Berdine 81909abf23 [sledge] Model llvm.trap as nop
6 years ago
Josh Berdine af766b5320 [sledge] Fix translation of Invoke retpolines
6 years ago
Josh Berdine 9a62554322 [sledge] Fix potential divergence in Llair.sexp_of functions
6 years ago
Josh Berdine 109a587654 [sledge] Fix normalization of high-degree polynomials
6 years ago
Josh Berdine ffb0f4f912 [sledge] Relax 'no new subexps' invariant for Xor expressions
6 years ago
Josh Berdine 3483ec72a1 [sledge] Do not normalize shifts by enough bits to be undefined
6 years ago
Josh Berdine 8f2af62480 [sledge] Clamp rational numerator and denominator to bitwidth
6 years ago
Josh Berdine 07e8ac2d6a [sledge] Avoid division by zero during Exp normalization
6 years ago
Josh Berdine d2a97a6174 [sledge] Use integer or float constants as needed in Exp normalization
6 years ago
Josh Berdine 26a3058659 [sledge] Refine Convert Exp invariant
6 years ago
Josh Berdine 0d70f57c6f [sledge] Relax overly strong polynomial invariants
6 years ago
Josh Berdine 8a9cf0198a [sledge] Add assertions on Call and Invoke callee operands
6 years ago
Josh Berdine 684f12a498 [sledge] Protect against misdeclarations of operator new
6 years ago