<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">I'm not quite sure what you're trying to do, but you've constructed an expression like</div><div class=""><br class=""></div><blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;" class=""><div class="">($V == 0) | ($V == 1)</div></blockquote><div class=""><br class=""></div>and the analyzer doesn't have a great way to reason about that. (Apart from generally poor bitwise operator support, it's not something people write in real code.)<div class=""><br class=""></div><div class="">We don't have a good general way to produce single disjunctive states, but in this case you can can the same effect with ($V >= 0 && $V <= 1).</div><div class=""><br class=""></div><div class="">Jordan</div><div class=""><br class=""><br class=""><div><blockquote type="cite" class=""><div class="">On May 19, 2015, at 2:11 , Manuel Klimek <<a href="mailto:klimek@google.com" class="">klimek@google.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">+jordan who can probably answer that off the top of his head :)<br class=""><br class=""><div class="gmail_quote">On Thu, May 14, 2015 at 8:21 AM Ben Laurie <<a href="mailto:benl@google.com" class="">benl@google.com</a>> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="">So, I have this:<div class=""><br class=""></div><div class=""><div class=""> Optional<DefinedSVal> V = ...;</div><div class=""> ASTContext &Ctx = svalBuilder.getContext();</div><div class=""> DefinedSVal Zero = svalBuilder.makeIntVal(0, Ctx.IntTy);</div><div class=""> DefinedSVal One = svalBuilder.makeIntVal(1, Ctx.IntTy);</div><div class=""> SVal isZero = svalBuilder.evalBinOp(state, BO_EQ, *V, Zero, Ctx.IntTy);</div><div class=""> SVal isOne = svalBuilder.evalBinOp(state, BO_EQ, *V, One, Ctx.IntTy);</div><div class=""> SVal check = svalBuilder.evalBinOp(state, BO_Or, isZero, isOne, Ctx.IntTy);</div></div><div class=""><br class=""></div><div class=""><div class=""> ConstraintManager &CM = state->getStateManager().getConstraintManager();</div><div class=""><br class=""></div><div class=""> ProgramStateRef stateZero, stateNotZero;</div><div class=""> std::tie(stateZero, stateNotZero) = CM.assumeDual(state, isZero.castAs<DefinedSVal>());</div></div><div class=""><br class=""></div><div class=""><div class=""> ProgramStateRef stateOne, stateNotOne;</div><div class=""> std::tie(stateOne, stateNotOne) = CM.assumeDual(state, isOne.castAs<DefinedSVal>());</div></div><div class=""><br class=""></div><div class=""><div class=""> ProgramStateRef right = CM.assume(state, check.castAs<DefinedSVal>(), true);</div><div class=""><br class=""></div></div><div class="">Ignoring for a moment that I should not cast to DefinedSVal unless it actually is defined, how come if that's executed on this snippet:</div><div class=""><br class=""></div><div class="">if (x > 1)</div><div class=""> return x;</div><div class=""><br class=""></div><div class="">so V ends up being the x in the return statement, check is not defined, even tho stateZero etc, are all defined and have values as you'd expect?</div><div class=""><br class=""></div><div class=""><br class=""></div></div>
_______________________________________________<br class="">
cfe-dev mailing list<br class="">
<a href="mailto:cfe-dev@cs.uiuc.edu" target="_blank" class="">cfe-dev@cs.uiuc.edu</a><br class="">
<a href="http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev" target="_blank" class="">http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev</a><br class="">
</blockquote></div></div>
</div></blockquote></div><br class=""></div></body></html>