<br><br><div class="gmail_quote">On Fri, Nov 7, 2008 at 3:43 PM, Ted Kremenek <span dir="ltr"><<a href="mailto:kremenek@apple.com">kremenek@apple.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d"><br>
On Nov 6, 2008, at 10:23 PM, Zhongxing Xu wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
So I feel these are what we should do:<br>
1. overhaul the transfer function interface.<br>
2. add specific checker (e.g. array bound checker) that will use the region extent property.<br>
3. implement the region extent interface.<br>
</blockquote>
<br></div>
I think we should get RegionManager working first for all code that BasicStoreManager works on. This is something we've already started working on that would be really great to adopt as the default.</blockquote><div>
<br>Right. This should be done before adding the extent interface.<br> </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>
<br>
The region extent interface is something we can gradually add; with the default extent simply wrapping UnknownVal.<br>
<br>
I'm not certain if we need a specific checker for out-of-bounds access or just incorporate it as part of GRExprEngine. It seems like a basic (i.e., core) check, and would add more path-sensitivity (e.g., if the access succeeds, we know the index was within the bounds of the array).<br>
</blockquote></div><br>