32 const exprt &src_original,
35 if(src_ssa.
id()!=src_original.
id())
49 tmp.
index()=index_value;
55 return std::move(tmp);
60 else if(
id==ID_member)
92 return std::move(tmp2);
94 else if(
id==ID_typecast)
102 return std::move(tmp);
104 else if(
id==ID_byte_extract_little_endian ||
105 id==ID_byte_extract_big_endian)
124 if(expr.
id()==ID_symbol)
126 const auto &type = expr.
type();
127 if(type.id() != ID_code && type.id() != ID_mathematical_function)
131 if(!ns.
lookup(
id, symbol))
141 for(
const auto &op : expr.
operands())
160 if(SSA_step.
source.
pc->source_location().as_string().empty())
177 if(SSA_step.
source.
pc->code().get_statement() != ID_function_call)
187 if(type.
id() == ID_array)
218 typedef symex_target_equationt::SSA_stepst::const_iterator ssa_step_iteratort;
219 typedef std::map<mp_integer, std::vector<ssa_step_iteratort>> time_mapt;
225 ssa_step_iteratort last_step_to_keep = target.
SSA_steps.end();
226 bool last_step_was_kept =
false;
231 for(ssa_step_iteratort it = target.
SSA_steps.begin();
236 last_step_to_keep == target.
SSA_steps.end() &&
237 is_last_step_to_keep(it, decision_procedure))
239 last_step_to_keep = it;
247 if(it->is_constraint() ||
250 else if(it->is_atomic_begin())
259 else if(it->is_shared_read() || it->is_shared_write() ||
267 if(it->is_shared_read() || it->is_shared_write())
272 exprt clock_value = decision_procedure.
get(
275 const auto cv = numeric_cast<mp_integer>(clock_value);
281 else if(it->is_atomic_end() && current_time<0)
284 INVARIANT(current_time >= 0,
"time keeping inconsistency");
289 time_mapt::const_iterator time_before_steps_it =
290 time_map.find(time_before);
292 if(time_before_steps_it != time_map.end())
294 std::vector<ssa_step_iteratort> ¤t_time_steps =
295 time_map[current_time];
297 current_time_steps.insert(
298 current_time_steps.end(),
299 time_before_steps_it->second.begin(),
300 time_before_steps_it->second.end());
302 time_map.erase(time_before_steps_it);
310 if(it->is_assignment() &&
319 if(it == last_step_to_keep)
321 last_step_was_kept =
true;
324 time_map[current_time].push_back(it);
328 last_step_to_keep == target.
SSA_steps.end() || last_step_was_kept,
329 "last step in SSA trace to keep must not be filtered out as a sync "
330 "instruction, not-taken branch, PHI node, or similar");
335 unsigned step_nr = 0;
337 for(
const auto &time_and_ssa_steps : time_map)
339 for(
const auto &ssa_step_it : time_and_ssa_steps.second)
341 const auto &SSA_step = *ssa_step_it;
345 goto_trace_step.
step_nr = ++step_nr;
347 goto_trace_step.
thread_nr = SSA_step.source.thread_nr;
348 goto_trace_step.
pc = SSA_step.source.pc;
349 goto_trace_step.
function_id = SSA_step.source.function_id;
350 if(SSA_step.is_assert())
352 goto_trace_step.
comment = SSA_step.comment;
353 goto_trace_step.
property_id = SSA_step.property_id;
355 goto_trace_step.
type = SSA_step.type;
356 goto_trace_step.
hidden = SSA_step.hidden;
358 goto_trace_step.
io_id = SSA_step.io_id;
359 goto_trace_step.
formatted = SSA_step.formatted;
362 for(
const auto &arg : SSA_step.converted_function_arguments)
372 (SSA_step.is_assignment() &&
373 (SSA_step.assignment_type ==
375 SSA_step.assignment_type ==
380 if(SSA_step.original_full_lhs.is_not_nil())
386 SSA_step.original_full_lhs,
387 SSA_step.ssa_full_lhs),
393 if(SSA_step.ssa_full_lhs.is_not_nil())
396 decision_procedure.
get(SSA_step.ssa_full_lhs);
402 for(
const auto &j : SSA_step.converted_io_args)
404 goto_trace_step.
io_args.push_back(
408 if(SSA_step.is_assert() || SSA_step.is_assume() || SSA_step.is_goto())
410 goto_trace_step.
cond_expr = SSA_step.cond_expr;
413 decision_procedure.
get(SSA_step.cond_handle).
is_true();
416 if(SSA_step.source.pc->is_assert() || SSA_step.source.pc->is_assume())
422 if(ssa_step_it == last_step_to_keep)
430 symex_target_equationt::SSA_stepst::const_iterator last_step_to_keep,
435 const auto is_last_step_to_keep =
437 symex_target_equationt::SSA_stepst::const_iterator it,
441 target, is_last_step_to_keep, decision_procedure, ns, goto_trace);
445 symex_target_equationt::SSA_stepst::const_iterator step,
448 return step->is_assert() &&
449 decision_procedure.
get(step->cond_handle).
is_false();
static exprt build_full_lhs_rec(const decision_proceduret &decision_procedure, const namespacet &ns, const exprt &src_original, const exprt &src_ssa)
static void set_internal_dynamic_object(const exprt &expr, goto_trace_stept &goto_trace_step, const namespacet &ns)
set internal field for variable assignment related to dynamic_object[0-9] and dynamic_[0-9]_array.
static void update_internal_field(const SSA_stept &SSA_step, goto_trace_stept &goto_trace_step, const namespacet &ns)
set internal for variables assignments related to dynamic_object and CPROVER internal functions (e....
static bool is_failed_assertion_step(symex_target_equationt::SSA_stepst::const_iterator step, const decision_proceduret &decision_procedure)
static void replace_nondet_in_type(typet &type, const decision_proceduret &solver)
Replace nondet values that appear in type by their values as found by solver.
void build_goto_trace(const symex_target_equationt &target, ssa_step_predicatet is_last_step_to_keep, const decision_proceduret &decision_procedure, const namespacet &ns, goto_tracet &goto_trace)
Build a trace by going through the steps of target and stopping after the step matching a given condi...
std::function< bool(symex_target_equationt::SSA_stepst::const_iterator, const decision_proceduret &)> ssa_step_predicatet
Expression classes for byte-level operators.
const byte_extract_exprt & to_byte_extract_expr(const exprt &expr)
Single SSA step in the equation.
symex_targett::assignment_typet assignment_type
symex_targett::sourcet source
bool is_function_call() const
const exprt & size() const
An interface for a decision procedure for satisfiability problems.
virtual exprt get(const exprt &) const =0
Return expr with variables replaced by values from satisfying assignment if available.
dstringt has one field, an unsigned integer no which is an index into a static table of strings.
Base class for all expressions.
bool is_true() const
Return whether the expression is a constant representing true.
bool is_false() const
Return whether the expression is a constant representing false.
typet & type()
Return the type of the expression.
static irep_idt entry_point()
Get the identifier of the entry point to a goto model.
Step of the trace of a GOTO program.
std::vector< exprt > function_arguments
goto_programt::const_targett pc
assignment_typet assignment_type
std::size_t step_nr
Number of the step in the trace.
The trinary if-then-else operator.
bool get_bool(const irep_idt &name) const
const irep_idt & id() const
Extract member of struct or union.
const exprt & struct_op() const
A namespacet is essentially one or two symbol tables bound together, to allow for symbol lookups in t...
bool lookup(const irep_idt &name, const symbolt *&symbol) const override
See documentation for namespace_baset::lookup().
static irep_idt rw_clock_id(event_it e, axiomt axiom=AX_PROPAGATION)
Build identifier for the read/write clock variable.
const irep_idt get_original_name() const
static symbol_exprt typeless(const irep_idt &id)
Generate a symbol_exprt without a proper type.
typet type
Type of symbol.
Inheriting the interface of symex_targett this class represents the SSA form of the input program as ...
@ VISIBLE_ACTUAL_PARAMETER
@ HIDDEN_ACTUAL_PARAMETER
Semantic type conversion.
The type of an expression, extends irept.
Decision Procedure Interface.
Goto Programs with Functions.
Add constraints to equation encoding partial orders on events.
void restore_union(exprt &expr, const namespacet &ns)
Undo the union access -> byte_extract replacement that rewrite_union did for the purpose of displayin...
bool simplify(exprt &expr, const namespacet &ns)
exprt simplify_expr(exprt src, const namespacet &ns)
void solver(std::vector< framet > &frames, const std::unordered_set< symbol_exprt, irep_hash > &address_taken, const solver_optionst &solver_options, const namespacet &ns, std::vector< propertyt > &properties, std::size_t property_index)
#define INVARIANT(CONDITION, REASON)
This macro uses the wrapper function 'invariant_violated_string'.
const ssa_exprt & to_ssa_expr(const exprt &expr)
Cast a generic exprt to an ssa_exprt.
const if_exprt & to_if_expr(const exprt &expr)
Cast an exprt to an if_exprt.
const typecast_exprt & to_typecast_expr(const exprt &expr)
Cast an exprt to a typecast_exprt.
const member_exprt & to_member_expr(const exprt &expr)
Cast an exprt to a member_exprt.
const index_exprt & to_index_expr(const exprt &expr)
Cast an exprt to an index_exprt.
const array_typet & to_array_type(const typet &type)
Cast a typet to an array_typet.
goto_programt::const_targett pc
const type_with_subtypet & to_type_with_subtype(const typet &type)