[cfe-dev] execution trace on Clang AST

[Kihong Heo via cfe-dev]

Hi list,

I am wondering if there is any method to extract execution traces or path conditions in Clang AST level. I want to run a binary with an input and observe which AST nodes are visited during the execution. I tried Sanitizer Coverage tool but it is quite hard to match LLVM bitcode and source code.

It would be appreciated if you could give some idea.

Thanks,
Kihong