51#define UNEXPECTEDCASE(S) PRECONDITION_WITH_DIAGNOSTICS(false, S);
54#define SMT2_TODO(S) PRECONDITION_WITH_DIAGNOSTICS(false, "TODO: " S)
63 : use_FPA_theory(
false),
64 use_array_of_bool(
false),
66 use_check_sat_assuming(
false),
68 use_lambda_for_array(
false),
78 no_boolean_variables(0)
169 "variable number shall be within bounds");
175 out <<
"; SMT 2" <<
"\n";
184 out <<
"; Generated for the CPROVER SMT2 solver\n";
break;
194 out <<
"(set-info :source \"" <<
notes <<
"\")" <<
"\n";
196 out <<
"(set-option :produce-models true)" <<
"\n";
202 out <<
"(set-logic " <<
logic <<
")" <<
"\n";
215 out <<
"(check-sat-assuming (";
225 out <<
"; assumptions\n";
236 out <<
"(check-sat)\n";
244 out <<
"(get-value (" <<
id <<
"))"
252 out <<
"; end of SMT2 file"
290 std::size_t number = 0;
291 std::size_t
h=pointer_width-1;
296 const typet &type = o.type();
308 out <<
"(assert (=> (= "
309 <<
"((_ extract " <<
h <<
" " << l <<
") ";
312 <<
"(= " <<
id <<
" ";
344 return it->second.value;
354 return it->second.value;
369 else if(op.is_false())
417 if(!src.
id().empty())
421 if(s.size()>=2 && s[0]==
'#' && s[1]==
'b')
426 else if(s.size()>=2 && s[0]==
'#' && s[1]==
'x')
437 else if(src.
get_sub().size()==2 &&
442 else if(src.
get_sub().size()==3 &&
445 src.
get_sub()[1].id_string().substr(0, 2)==
"bv")
449 else if(src.
get_sub().size()==4 &&
473 else if(src.
get_sub().size()==4 &&
482 else if(src.
get_sub().size()==4 &&
491 else if(src.
get_sub().size()==4 &&
513 result.
type() = type;
532 "smt2_convt::parse_literal should not be of unsupported type " +
558 operands.emplace_back(
found_op->second);
571 operands.emplace_back(
found_op->second);
597 long index =
tempint.to_long();
601 else if(src.
get_sub().size()==2 &&
602 src.
get_sub()[0].get_sub().size()==3 &&
603 src.
get_sub()[0].get_sub()[0].id()==
"as" &&
604 src.
get_sub()[0].get_sub()[1].id()==
"const")
641 if(components.empty())
649 for(std::size_t i=0; i<components.size(); i++)
659 src.
get_sub().size() > j,
"insufficient number of component values");
676 std::size_t offset=0;
678 for(std::size_t i=0; i<components.size(); i++)
687 "struct component bits shall be within struct bit vector");
710 for(
const auto &binding : src.
get_sub()[1].get_sub())
712 const irep_idt &name = binding.get_sub()[0].id();
797 const std::size_t
max_objects = std::size_t(1) << object_bits;
803 "too many addressed objects: maximum number of objects is set to 2^n=" +
805 " (with n=" + std::to_string(object_bits) +
"); " +
806 "use the `--object-bits n` option to increase the maximum number"};
809 out <<
"(concat (_ bv" <<
object_id <<
" " << object_bits <<
")"
810 <<
" (_ bv0 " <<
boolbv_width(result_type) - object_bits <<
"))";
852 "member expression operand shall have struct type");
887 "operand of address of expression should not be of kind " +
923 out <<
"; convert\n";
924 out <<
"; Converting var_no " << l.
var_no() <<
" with expr ID of "
934 out <<
"(declare-fun ";
936 out <<
" () Bool)\n";
937 out <<
"(assert (= ";
949 out <<
"(define-fun " << identifier <<
" () Bool ";
977 const auto identifier =
1010 if(identifier.empty())
1035 std::string result =
"|";
1037 for(
auto ch : identifier)
1045 result+=std::to_string(
ch);
1065 return "f"+std::to_string(spec.
width())+
"_"+std::to_string(spec.
f);
1142 !expr.
operands().empty(),
"non-symbol expressions shall have operands");
1148 for(
const auto &op : expr.
operands())
1190 DATA_INVARIANT(!
id.empty(),
"nondet symbol must have identifier");
1227 "concatenation over a single operand should have matching types",
1238 "given expression should have at least two operands",
1256 for(
const auto &op : expr.
operands())
1287 else if(expr.
operands().size() == 1)
1293 else if(expr.
operands().size() >= 3)
1303 for(
const auto &op : expr.
operands())
1315 expr.
id_string() +
" should have at least one operand");
1329 const auto &type = expr.
type();
1382 out <<
"(fp.isNegative ";
1400 "sign should not be applied to unsupported type",
1447 "logical and, or, and xor expressions should have Boolean type");
1450 "logical and, or, and xor expressions should have at least two operands");
1452 out <<
"(" << expr.
id();
1453 for(
const auto &op : expr.
operands())
1464 "logical nand, nor, xnor expressions should have Boolean type");
1467 "logical nand, nor, xnor expressions should have at least one operand");
1483 for(
const auto &op : expr.
operands())
1497 implies_expr.is_boolean(),
"implies expression should have Boolean type");
1510 not_expr.is_boolean(),
"not expression should have Boolean type");
1522 "operands of equal expression shall have same type");
1543 "operands of not equal expression shall have same type");
1560 "operands of float equal and not equal expressions shall have same type");
1643 "array of expression shall have array type");
1647 out <<
"((as const ";
1655 defined_expressionst::const_iterator it =
1667 "array_comprehension expression shall have array type");
1671 out <<
"(lambda ((";
1753 "unsupported distance type for " +
shift_expr.id_string() +
": " +
1761 "unsupported type for " +
shift_expr.id_string() +
": " +
1776 out <<
"((_ rotate_left";
1778 out <<
"((_ rotate_right";
1792 "distance type for " +
shift_expr.id_string() +
"must be constant");
1801 "unsupported type for " +
shift_expr.id_string() +
": " +
1830 out <<
"(object-address ";
1873 "operand of pointer offset expression shall be of pointer type");
1900 "pointer object expressions should be of pointer type");
1906 out <<
"((_ zero_extend " <<
ext <<
") ";
1908 out <<
"((_ extract "
1909 << pointer_width-1 <<
" "
1925 out <<
"(= ((_ extract "
1926 << pointer_width-1 <<
" "
1947 out <<
"(= ((_ extract " << i <<
" " << i <<
") ";
1953 out <<
"(= ((_ extract 0 0) ";
1988 out <<
"(= ((_ extract 0 0) ";
1997 SMT2_TODO(
"smt2: extractbits with non-constant index");
2006 out <<
"((_ repeat " << times <<
") ";
2014 false,
"byte_extract ops should be lowered in prepare_for_convert_expr");
2020 false,
"byte_update ops should be lowered in prepare_for_convert_expr");
2032 out <<
"(ite (bvslt ";
2045 out <<
"(ite (bvslt ";
2080 out <<
"(fp.isNaN ";
2104 out <<
"(not (fp.isNaN ";
2108 out <<
"(not (fp.isInfinite ";
2132 out <<
"(fp.isInfinite ";
2154 out <<
"(fp.isNormal ";
2177 "overflow plus and overflow minus expressions shall be of Boolean type");
2187 out <<
"(let ((?sum (";
2188 out << (subtract?
"bvsub":
"bvadd");
2189 out <<
" ((_ sign_extend 1) ";
2192 out <<
" ((_ sign_extend 1) ";
2207 out <<
" ((_ extract " << width - 1 <<
" 0) ?sum) ";
2212 "((_ extract " << width <<
" " << width <<
") ?sum) "
2213 "((_ extract " << (width-1) <<
" " << (width-1) <<
") ?sum)";
2227 out <<
"(let ((?sum (" << (subtract ?
"bvsub" :
"bvadd");
2228 out <<
" ((_ zero_extend 1) ";
2231 out <<
" ((_ zero_extend 1) ";
2244 out <<
" ((_ extract " << width - 1 <<
" 0) ?sum) ";
2248 out <<
"((_ extract " << width <<
" " << width <<
") ?sum)";
2259 "overflow check should not be performed on unsupported type",
2273 "overflow mult expression shall be of Boolean type");
2283 out <<
"(let ( (prod (bvmul ((_ sign_extend " << width <<
") ";
2285 out <<
") ((_ sign_extend " << width <<
") ";
2300 out <<
" ((_ extract " << width - 1 <<
" 0) prod) ";
2304 out <<
"(or (bvsge prod (_ bv" <<
power(2, width-1) <<
" "
2306 out <<
" (bvslt prod (bvneg (_ bv" <<
power(2, width - 1) <<
" "
2307 << width * 2 <<
"))))";
2318 out <<
"(let ((prod (bvmul ((_ zero_extend " << width <<
") ";
2320 out <<
") ((_ zero_extend " << width <<
") ";
2335 out <<
" ((_ extract " << width - 1 <<
" 0) prod) ";
2339 out <<
"(bvuge prod (_ bv" <<
power(2, width) <<
" " << width * 2 <<
"))";
2351 "overflow check should not be performed on unsupported type",
2366 out <<
"(let ((?sum (";
2367 out << (subtract ?
"bvsub" :
"bvadd");
2368 out <<
" ((_ sign_extend 1) ";
2371 out <<
" ((_ sign_extend 1) ";
2378 << width <<
" " << width
2381 << (width - 1) <<
" " << (width - 1) <<
") ?sum)";
2385 out <<
"((_ extract " << width - 1 <<
" 0) ?sum) ";
2388 out <<
"(ite (= ((_ extract " << width <<
" " << width <<
") ?sum) #b0) ";
2400 out <<
"(let ((?sum (" << (subtract ?
"bvsub" :
"bvadd");
2401 out <<
" ((_ zero_extend 1) ";
2404 out <<
" ((_ zero_extend 1) ";
2409 out <<
"(ite (= ((_ extract " << width <<
" " << width <<
") ?sum) #b0) ";
2412 out <<
" ((_ extract " << width - 1 <<
" 0) ?sum) ";
2426 "saturating_plus/minus on unsupported type",
2446 throw "MathSAT does not support quantifiers";
2481 const auto &variables =
let_expr.variables();
2482 const auto &values =
let_expr.values();
2487 for(
auto &binding :
make_range(variables).zip(values))
2509 "smt2_convt::convert_expr: '" + expr.
id_string() +
2510 "' is not yet supported");
2518 "operand of byte swap expression shall have same type as the expression");
2521 out <<
"(let ((bswap_op ";
2529 const std::size_t width =
2537 "bit width indicated by type of bswap expression should be a multiple "
2538 "of the number of bits per byte");
2549 for(std::size_t
byte = 0;
byte < bytes;
byte++)
2553 out <<
"(bswap_byte_" <<
byte <<
' ';
2564 for(std::size_t
byte = 0;
byte < bytes;
byte++)
2565 out <<
" bswap_byte_" <<
byte;
2628 "smt2_convt::convert_expr should not be applied to unsupported "
2665 out <<
"(not (fp.isZero ";
2710 out <<
"((_ sign_extend ";
2712 out <<
"((_ zero_extend ";
2737 out <<
"(let ((?tcop ";
2745 out <<
"((_ sign_extend "
2760 out <<
" (ite (and ";
2784 defined_expressionst::const_iterator it =
2799 "typecast unexpected "+
src_type.id_string()+
" -> "+
2806 "typecast unexpected "+
src_type.id_string()+
" -> "+
2818 out <<
" (concat (_ bv1 "
2821 "(_ bv0 " << spec.
width <<
")";
2837 out <<
"((_ sign_extend ";
2859 SMT2_TODO(
"can't convert non-constant integer to bitvector");
2869 "bit vector with of source and destination type shall be equal");
2876 "bit vector with of source and destination type shall be equal");
2886 "bit vector with of source and destination type shall be equal");
2904 std::ostringstream
e_str;
2906 <<
" src == " <<
format(src);
2939 "from_width should be smaller than to_integer_bits as other case "
2940 "have been handled above");
2943 out <<
"(_ zero_extend "
2950 out <<
"((_ sign_extend "
2962 out <<
"(concat (concat"
2976 out <<
"(let ((?tcop ";
2984 out <<
"((_ extract "
2993 "to_integer_bits should be greater than from_integer_bits as the"
2994 "other case has been handled above");
2995 out <<
"((_ sign_extend "
3007 out <<
"((_ extract "
3016 "to_fraction_bits should be greater than from_fraction_bits as the"
3017 "other case has been handled above");
3018 out <<
"(concat ((_ extract "
3052 out <<
"((_ sign_extend "
3211 out <<
"((_ to_fp " <<
dst.get_e() <<
" "
3212 <<
dst.get_f() + 1 <<
") ";
3242 out <<
"((_ to_fp_unsigned " <<
dst.get_e() <<
" "
3243 <<
dst.get_f() + 1 <<
") ";
3260 out <<
"((_ to_fp " <<
dst.get_e() <<
" "
3261 <<
dst.get_f() + 1 <<
") ";
3326 out <<
"(fp.roundToIntegral ";
3347 components.size() == expr.
operands().size(),
3348 "number of struct components as indicated by the struct type shall be equal"
3349 "to the number of operands of the struct expression");
3351 DATA_INVARIANT(!components.empty(),
"struct shall have struct components");
3361 for(struct_typet::componentst::const_iterator
3362 it=components.begin();
3363 it!=components.end();
3380 else if(op.type().id() ==
ID_bool)
3388 for(std::size_t i = components.size(); i > 1; i--)
3420 out <<
"(let ((?far ";
3428 out <<
"(select ?far ";
3459 "total_width should be greater than member_width as member_width can be"
3460 "at most as large as total_width and the other case has been handled "
3486 out <<
"(_ bv" << value
3487 <<
" " << width <<
")";
3495 out <<
"(_ bv" << v <<
" " << spec.
width <<
")";
3517 out <<
"((_ to_fp " << e <<
" " << f <<
")"
3523 out <<
"(_ NaN " << e <<
" " << f <<
")";
3528 out <<
"(_ -oo " << e <<
" " << f <<
")";
3530 out <<
"(_ +oo " << e <<
" " << f <<
")";
3550 out <<
"(_ bv" << v <<
" " << spec.
width() <<
")";
3567 out <<
"(_ bv" << value <<
" " << width <<
")";
3593 size_t pos=value.find(
"/");
3595 if(
pos==std::string::npos)
3596 out << value <<
".0";
3599 out <<
"(/ " << value.substr(0,
pos) <<
".0 "
3600 << value.substr(
pos+1) <<
".0)";
3612 out <<
"(- " << value.substr(1, std::string::npos) <<
')';
3641 "unsupported type for euclidean_mod: " + expr.
type().
id_string());
3674 out <<
"(let ((?obj ((_ extract "
3675 << pointer_width-1 <<
" "
3690 out <<
" (= (_ bv" <<
object
3818 for(
const auto &op : expr.
operands())
3888 "one of the operands should have pointer type");
3892 base_type.id() !=
ID_empty,
"no pointer arithmetic over void pointers");
3899 out <<
"(let ((?pointerop ";
3910 <<
") ?pointerop) ";
3911 out <<
"(bvadd ((_ extract " <<
offset_bits - 1 <<
" 0) ?pointerop) ";
3960 out <<
"roundNearestTiesToEven";
3962 out <<
"roundTowardNegative";
3964 out <<
"roundTowardPositive";
3966 out <<
"roundTowardZero";
3968 out <<
"roundNearestTiesToAway";
3972 "Rounding mode should have value 0, 1, 2, 3, or 4",
3980 out <<
"(ite (= (_ bv0 " << width <<
") ";
3982 out <<
") roundNearestTiesToEven ";
3984 out <<
"(ite (= (_ bv1 " << width <<
") ";
3986 out <<
") roundTowardNegative ";
3988 out <<
"(ite (= (_ bv2 " << width <<
") ";
3990 out <<
") roundTowardPositive ";
3992 out <<
"(ite (= (_ bv3 " << width <<
") ";
3994 out <<
") roundTowardZero ";
3997 out <<
"roundNearestTiesToAway";
4031 "type should not be one of the unsupported types",
4058 base_type.id() !=
ID_empty,
"no pointer arithmetic over void pointers");
4068 "bitvector width of operand shall be equal to the bitvector width of "
4122 out <<
"(bvsub (bvsub ";
4137 "type of ieee floating point expression shall be floatbv");
4173 out <<
"((_ extract " << spec.
width-1 <<
" 0) ";
4201 "type of ieee floating point expression shall be floatbv");
4224 tmp.operands().pop_back();
4232 "expression should have been converted to a variant with two operands");
4258 out <<
"((_ extract "
4280 for(
const auto &op : expr.
operands())
4296 "type of ieee floating point expression shall be floatbv");
4316 "type of ieee floating point expression shall be floatbv");
4330 "smt2_convt::convert_floatbv_rem to be implemented when not using "
4339 "with expression should have exactly three operands");
4367 out <<
"(let ((distance? ";
4392 out <<
"distance?)) ";
4398 out <<
") distance?)))";
4415 "struct should have accessed component");
4434 else if(op.type().id() ==
ID_bool)
4453 out <<
"(let ((?withop ";
4471 out <<
" ((_ extract " << (m.
offset - 1) <<
" 0) ?withop))";
4476 out <<
"(concat (concat "
4480 out <<
") ((_ extract " << (m.
offset - 1) <<
" 0) ?withop)";
4504 "total width should be greater than member_width as member_width is at "
4505 "most as large as total_width and the other case has been handled "
4508 out <<
"((_ extract "
4534 "with expects struct, union, or array type, but got "+
4542 SMT2_TODO(
"smt2_convt::convert_update to be implemented");
4622 false,
"index with unsupported array type: " +
array_op_type.id_string());
4640 struct_type.has_component(name),
"struct should have accessed component");
4672 width != 0,
"failed to get union member width");
4678 out <<
"((_ extract " << (width - 1) <<
" 0) ";
4686 out <<
"((_ extract " << (width - 1) <<
" 0) ";
4693 "convert_member on an unexpected type "+
struct_op_type.id_string());
4750 for(std::size_t i=components.size(); i>1; i--)
4779 "floatbv expressions should be flattened when using FPA theory");
4815 "cannot unflatten arrays of non-constant size");
4822 out <<
"((as const ";
4828 <<
"0) ?ufop" <<
nesting <<
")";
4839 <<
") ?ufop" <<
nesting <<
")";
4869 std::size_t offset=0;
4872 for(struct_typet::componentst::const_iterator
4873 it=components.begin();
4874 it!=components.end();
4885 << offset <<
") ?ufop" <<
nesting <<
")";
4910 for(
const auto &op : expr.
operands())
4915 if(expr.
id()==
ID_or && !value)
4917 for(
const auto &op : expr.
operands())
4960 out <<
"; set_to true (equal)\n";
4990 out <<
')' <<
')' <<
'\n';
5027 out <<
"; set_to " << (value?
"true":
"false") <<
"\n"
5098 "lower_byte_operators should remove all byte operators");
5110 it.next_sibling_or_parent();
5118 it.next_sibling_or_parent();
5140 std::unordered_map<irep_idt, std::optional<identifiert>>
shadowed_syms;
5145 for(
const auto &symbol :
q_expr.variables())
5147 const auto identifier = symbol.get_identifier();
5153 : std::optional{
id_entry.first->second}});
5168 for(
const auto &op : expr.
operands())
5183 identifier=
"nondet_"+
5194 out <<
"; find_symbols\n";
5236 out <<
"; the following is a substitute for lambda i. x\n";
5237 out <<
"(declare-fun " <<
id <<
" () ";
5244 out <<
"(assert (forall ((i ";
5246 out <<
")) (= (select " <<
id <<
" i) ";
5276 out <<
"(declare-fun " <<
id <<
" () ";
5280 out <<
"; the following is a substitute for lambda i . x(i)\n";
5281 out <<
"; universally quantified initialization of the array\n";
5282 out <<
"(assert (forall ((";
5293 out <<
")) (= (select " <<
id <<
" ";
5319 out <<
"; the following is a substitute for an array constructor" <<
"\n";
5320 out <<
"(declare-fun " <<
id <<
" () ";
5326 for(std::size_t i = 0; i < expr.
operands().size(); i++)
5328 out <<
"(assert (= (select " <<
id <<
" ";
5359 out <<
"; the following is a substitute for a string" <<
"\n";
5360 out <<
"(declare-fun " <<
id <<
" () ";
5364 for(std::size_t i=0; i<
tmp.operands().size(); i++)
5366 out <<
"(assert (= (select " <<
id <<
' ';
5370 out <<
"))" <<
"\n";
5383 out <<
"(declare-fun " <<
id <<
" () ";
5419 if(
bvfp_set.insert(function).second)
5421 out <<
"; this is a model for " << expr.
id() <<
" : "
5424 <<
"(define-fun " << function <<
" (";
5426 for(std::size_t i = 0; i < expr.
operands().size(); i++)
5430 out <<
"(op" << i <<
' ';
5440 for(std::size_t i = 0; i <
tmp1.operands().size(); i++)
5466 out <<
"(declare-fun " <<
id <<
" () ";
5472 out <<
"(assert (= ";
5484 irep_idt function =
"initial-state";
5488 out <<
"(declare-fun " << function <<
" (";
5501 out <<
"(declare-fun " << function <<
" (";
5519 :
"state-writeable-object";
5523 out <<
"(declare-fun " << function <<
" (";
5542 out <<
"(declare-fun " << function <<
" (";
5560 out <<
"(declare-fun " << function <<
" (";
5578 out <<
"(declare-fun " << function <<
" (";
5596 out <<
"(declare-fun " << function <<
" (";
5611 out <<
"(declare-fun " << function <<
" (";
5626 out <<
"(declare-fun " << function <<
" (";
5643 out <<
"(declare-fun " << function <<
" (";
5654 irep_idt function =
"object-address";
5658 out <<
"(declare-fun " << function <<
" (String) ";
5669 out <<
"(declare-fun " << function <<
" (";
5684 out <<
"(declare-fun " << function <<
" (";
5725 out <<
"(_ BitVec 1)";
5745 out <<
"(_ BitVec " << width <<
")";
5762 union_type.components().empty() || width != 0,
5763 "failed to get width of union");
5765 out <<
"(_ BitVec " << width <<
")";
5797 out <<
"(_ FloatingPoint "
5819 out <<
"(_ BitVec " << width <<
")";
5932 out <<
"))))" <<
"\n";
5949 for(struct_union_typet::componentst::const_iterator
5950 it=components.begin();
5951 it!=components.end();
5967 for(struct_union_typet::componentst::const_iterator
5968 it2=components.begin();
5969 it2!=components.end();
5977 <<
it2->get_name() <<
" s) ";
5981 out <<
"))" <<
"\n";
5999 for(
const auto &
param : parameters)
6037 out <<
"(declare-sort state 0)\n";
API to expression classes for bitvectors.
const onehot0_exprt & to_onehot0_expr(const exprt &expr)
Cast an exprt to a onehot0_exprt.
const replication_exprt & to_replication_expr(const exprt &expr)
Cast an exprt to a replication_exprt.
const shift_exprt & to_shift_expr(const exprt &expr)
Cast an exprt to a shift_exprt.
const popcount_exprt & to_popcount_expr(const exprt &expr)
Cast an exprt to a popcount_exprt.
const update_bits_exprt & to_update_bits_expr(const exprt &expr)
Cast an exprt to an update_bits_exprt.
const extractbits_exprt & to_extractbits_expr(const exprt &expr)
Cast an exprt to an extractbits_exprt.
const onehot_exprt & to_onehot_expr(const exprt &expr)
Cast an exprt to a onehot_exprt.
bool can_cast_expr< minus_overflow_exprt >(const exprt &base)
const find_first_set_exprt & to_find_first_set_expr(const exprt &expr)
Cast an exprt to a find_first_set_exprt.
bool can_cast_expr< overflow_result_exprt >(const exprt &base)
const update_bit_exprt & to_update_bit_expr(const exprt &expr)
Cast an exprt to an update_bit_exprt.
const bitnot_exprt & to_bitnot_expr(const exprt &expr)
Cast an exprt to a bitnot_exprt.
const bswap_exprt & to_bswap_expr(const exprt &expr)
Cast an exprt to a bswap_exprt.
const count_leading_zeros_exprt & to_count_leading_zeros_expr(const exprt &expr)
Cast an exprt to a count_leading_zeros_exprt.
const bitreverse_exprt & to_bitreverse_expr(const exprt &expr)
Cast an exprt to a bitreverse_exprt.
const extractbit_exprt & to_extractbit_expr(const exprt &expr)
Cast an exprt to an extractbit_exprt.
const zero_extend_exprt & to_zero_extend_expr(const exprt &expr)
Cast an exprt to a zero_extend_exprt.
const count_trailing_zeros_exprt & to_count_trailing_zeros_expr(const exprt &expr)
Cast an exprt to a count_trailing_zeros_exprt.
const bv_typet & to_bv_type(const typet &type)
Cast a typet to a bv_typet.
const fixedbv_typet & to_fixedbv_type(const typet &type)
Cast a typet to a fixedbv_typet.
const bitvector_typet & to_bitvector_type(const typet &type)
Cast a typet to a bitvector_typet.
const floatbv_typet & to_floatbv_type(const typet &type)
Cast a typet to a floatbv_typet.
const unsignedbv_typet & to_unsignedbv_type(const typet &type)
Cast a typet to an unsignedbv_typet.
const signedbv_typet & to_signedbv_type(const typet &type)
Cast a typet to a signedbv_typet.
bool has_byte_operator(const exprt &src)
Return true iff src or one of its operands contain a byte extract or byte update expression.
Expression classes for byte-level operators.
const byte_update_exprt & to_byte_update_expr(const exprt &expr)
exprt lower_byte_extract(const byte_extract_exprt &src, const namespacet &ns)
Rewrite a byte extract expression to more fundamental operations.
const byte_extract_exprt & to_byte_extract_expr(const exprt &expr)
exprt lower_byte_update(const byte_update_exprt &src, const namespacet &ns)
Rewrite a byte update expression to more fundamental operations.
typet c_bit_field_replacement_type(const c_bit_field_typet &src, const namespacet &ns)
pointer_typet pointer_type(const typet &subtype)
const c_bit_field_typet & to_c_bit_field_type(const typet &type)
Cast a typet to a c_bit_field_typet.
const c_enum_typet & to_c_enum_type(const typet &type)
Cast a typet to a c_enum_typet.
const c_enum_tag_typet & to_c_enum_tag_type(const typet &type)
Cast a typet to a c_enum_tag_typet.
const union_typet & to_union_type(const typet &type)
Cast a typet to a union_typet.
const c_bool_typet & to_c_bool_type(const typet &type)
Cast a typet to a c_bool_typet.
const union_tag_typet & to_union_tag_type(const typet &type)
Cast a typet to a union_tag_typet.
Operator to return the address of an object.
virtual void clear()
Reset the abstract state.
ait supplies three of the four components needed: an abstract interpreter (in this case handling func...
Thrown when an unexpected error occurs during the analysis (e.g., when the SAT solver returns an erro...
Pointer-typed bitvector constant annotated with the pointer expression that the bitvector is the nume...
Array constructor from list of elements.
const exprt & size() const
const typet & element_type() const
The type of the elements of the array.
A base class for binary expressions.
A base class for relations, i.e., binary predicates whose two operands have the same type.
Bit-wise negation of bit-vectors.
const membert & get_member(const struct_typet &type, const irep_idt &member) const
The byte swap expression.
std::vector< parametert > parameterst
struct configt::bv_encodingt bv_encoding
A constant literal expression.
const irep_idt & get_value() const
bool is_null_pointer() const
Returns true if expr has a pointer type and a value NULL; it also returns true when expr has value ze...
resultt
Result of running the decision procedure.
dstringt has one field, an unsigned integer no which is an index into a static table of strings.
Boute's Euclidean definition of Modulo – to match SMT-LIB2.
Base class for all expressions.
std::vector< exprt > operandst
bool has_operands() const
Return true if there is at least one operand.
bool is_true() const
Return whether the expression is a constant representing true.
bool is_boolean() const
Return whether the expression represents a Boolean.
bool is_false() const
Return whether the expression is a constant representing false.
bool is_zero() const
Return whether the expression is a constant representing 0.
bool is_constant() const
Return whether the expression is a constant.
typet & type()
Return the type of the expression.
void visit_post(std::function< void(exprt &)>)
These are post-order traversal visitors, i.e., the visitor is executed on a node after its children h...
The Boolean constant false.
std::size_t get_fraction_bits() const
Fixed-width bit-vector with signed fixed-point interpretation.
Round a floating-point number to an integral value considering the given rounding mode.
Semantic type conversion from/to floating-point formats.
Fixed-width bit-vector with IEEE floating-point interpretation.
IEEE floating-point operations These have two data operands (op0 and op1) and one rounding mode (op2)...
std::size_t width() const
An IEEE 754 floating-point value, including specificiation.
static ieee_float_valuet minus_infinity(const ieee_float_spect &_spec)
static ieee_float_valuet one(const floatbv_typet &)
static ieee_float_valuet zero(const floatbv_typet &type)
static ieee_float_valuet NaN(const ieee_float_spect &_spec)
static ieee_float_valuet plus_infinity(const ieee_float_spect &_spec)
The trinary if-then-else operator.
There are a large number of kinds of tree structured or tree-like data in CPROVER.
std::string pretty(unsigned indent=0, unsigned max_indent=0) const
const irep_idt & get(const irep_idt &name) const
const std::string & id_string() const
const irep_idt & id() const
Evaluates to true if the operand is finite.
Evaluates to true if the operand is infinite.
Evaluates to true if the operand is NaN.
Evaluates to true if the operand is a normal number.
Extract member of struct or union.
Modulo defined as lhs-(rhs * truncate(lhs/rhs)).
Binary multiplication Associativity is not specified.
const union_typet & follow_tag(const union_tag_typet &) const
Follow type tag of union type.
A namespacet is essentially one or two symbol tables bound together, to allow for symbol lookups in t...
Expression for finding the size (in bytes) of the object a pointer points to.
The plus expression Associativity is not specified.
const mp_integer & get_invalid_object() const
numberingt< exprt, irep_hash > objects
exprt pointer_expr(const pointert &pointer, const pointer_typet &type) const
Convert an (object,offset) pair to an expression.
void get_dynamic_objects(std::vector< mp_integer > &objects) const
mp_integer add_object(const exprt &expr)
The pointer type These are both 'bitvector_typet' (they have a width) and 'type_with_subtypet' (they ...
A base class for quantifier expressions.
A base class for shift and rotate operators.
Sign of an expression Predicate is true if _op is negative, false otherwise.
void convert_relation(const binary_relation_exprt &)
bool use_lambda_for_array
void convert_type(const typet &)
void unflatten(wheret, const typet &, unsigned nesting=0)
bool use_array_theory(const exprt &)
void find_symbols(const exprt &expr)
std::size_t number_of_solver_calls
void convert_typecast(const typecast_exprt &expr)
void write_footer()
Writes the end of the SMT file to the smt_convt::out stream.
tvt l_get(literalt l) const
void convert_floatbv_rem(const binary_exprt &expr)
std::unordered_map< irep_idt, irept > current_bindings
resultt dec_solve(const exprt &) override
Implementation of the decision procedure.
std::set< irep_idt > bvfp_set
void convert_address_of_rec(const exprt &expr, const pointer_typet &result_type)
void push() override
Unimplemented.
void convert_is_dynamic_object(const unary_exprt &)
void convert_literal(const literalt)
void convert_floatbv_div(const ieee_float_op_exprt &expr)
void convert_string_literal(const std::string &)
std::size_t get_number_of_solver_calls() const override
Return the number of incremental solver calls.
void convert_floatbv_mult(const ieee_float_op_exprt &expr)
boolbv_widtht boolbv_width
void convert_constant(const constant_exprt &expr)
std::string floatbv_suffix(const exprt &) const
void flatten2bv(const exprt &)
void convert_div(const div_exprt &expr)
exprt lower_byte_operators(const exprt &expr)
Lower byte_update and byte_extract operations within expr.
std::string type2id(const typet &) const
void convert_rounding_mode_FPA(const exprt &expr)
Converting a constant or symbolic rounding mode to SMT-LIB.
void convert_floatbv_typecast(const floatbv_typecast_exprt &expr)
struct_exprt parse_struct(const irept &s, const struct_typet &type)
void convert_mult(const mult_exprt &expr)
void convert_update_bit(const update_bit_exprt &)
exprt prepare_for_convert_expr(const exprt &expr)
Perform steps necessary before an expression is passed to convert_expr.
exprt get(const exprt &expr) const override
Return expr with variables replaced by values from satisfying assignment if available.
std::string decision_procedure_text() const override
Return a textual description of the decision procedure.
void convert_floatbv_minus(const ieee_float_op_exprt &expr)
bool use_check_sat_assuming
std::map< object_size_exprt, irep_idt > object_sizes
void define_object_size(const irep_idt &id, const object_size_exprt &expr)
datatype_mapt datatype_map
void convert_mod(const mod_exprt &expr)
static std::string convert_identifier(const irep_idt &identifier)
void convert_floatbv_plus(const ieee_float_op_exprt &expr)
void convert_struct(const struct_exprt &expr)
std::unordered_map< irep_idt, bool > set_values
The values which boolean identifiers have been smt2_convt::set_to or in other words those which are a...
smt2_convt(const namespacet &_ns, const std::string &_benchmark, const std::string &_notes, const std::string &_logic, solvert _solver, std::ostream &_out)
void convert_member(const member_exprt &expr)
void convert_euclidean_mod(const euclidean_mod_exprt &expr)
void convert_index(const index_exprt &expr)
pointer_logict pointer_logic
exprt handle(const exprt &expr) override
Generate a handle, which is an expression that has the same value as the argument in any model that i...
void print_assignment(std::ostream &out) const override
Print satisfying assignment to out.
void walk_array_tree(std::unordered_map< int64_t, exprt > *operands_map, const irept &src, const array_typet &type)
This function walks the SMT output and populates a map with index/value pairs for the array.
void convert_floatbv_round_to_integral(const floatbv_round_to_integral_exprt &)
void set_to(const exprt &expr, bool value) override
For a Boolean expression expr, add the constraint 'expr' if value is true, otherwise add 'not expr'.
exprt parse_rec(const irept &s, const typet &type)
void convert_union(const union_exprt &expr)
exprt parse_union(const irept &s, const union_typet &type)
exprt parse_array(const irept &s, const array_typet &type)
This function is for parsing array output from SMT solvers when "(get-value |???|)" returns an array ...
std::vector< bool > boolean_assignment
void flatten_array(const exprt &)
produce a flat bit-vector for a given array of fixed size
void convert_with(const with_exprt &expr)
std::vector< literalt > assumptions
void convert_plus(const plus_exprt &expr)
defined_expressionst defined_expressions
void pop() override
Currently, only implements a single stack element (no nested contexts)
void convert_update_bits(const update_bits_exprt &)
void find_symbols_rec(const typet &type, std::set< irep_idt > &recstack)
void convert_update(const update_exprt &)
std::set< irep_idt > state_fkt_declared
identifier_mapt identifier_map
void convert_minus(const minus_exprt &expr)
void convert_expr(const exprt &)
constant_exprt parse_literal(const irept &, const typet &type)
const smt2_symbolt & to_smt2_symbol(const exprt &expr)
std::size_t no_boolean_variables
smt2_identifierst smt2_identifiers
void convert_floatbv(const exprt &expr)
literalt convert(const exprt &expr)
Struct constructor from list of elements.
Structure type, corresponds to C style structs.
const irep_idt & get_name() const
const componentst & components() const
std::vector< componentt > componentst
The Boolean constant true.
Semantic type conversion.
static exprt conditional_cast(const exprt &expr, const typet &type)
The type of an expression, extends irept.
Generic base class for unary expressions.
The unary minus expression.
Union constructor from single element.
Fixed-width bit-vector with unsigned binary interpretation.
Replaces a sub-range of a bit-vector operand.
exprt lower() const
A lowering to masking, shifting, or.
Replaces a sub-range of a bit-vector operand.
exprt lower() const
A lowering to masking, shifting, or.
Operator to update elements in structs and arrays.
Operator to update elements in structs and arrays.
bool has_prefix(const std::string &s, const std::string &prefix)
Forward depth-first search iterators These iterators' copy operations are expensive,...
exprt make_binary(const exprt &expr)
splits an expression with >=3 operands into nested binary expressions
Deprecated expression utility functions.
exprt float_bv(const exprt &src)
API to expression classes for floating-point arithmetic.
const ieee_float_op_exprt & to_ieee_float_op_expr(const exprt &expr)
Cast an exprt to an ieee_float_op_exprt.
const floatbv_round_to_integral_exprt & to_floatbv_round_to_integral_expr(const exprt &expr)
Cast an exprt to a floatbv_round_to_integral_exprt.
const isnormal_exprt & to_isnormal_expr(const exprt &expr)
Cast an exprt to a isnormal_exprt.
const isinf_exprt & to_isinf_expr(const exprt &expr)
Cast an exprt to a isinf_exprt.
const isfinite_exprt & to_isfinite_expr(const exprt &expr)
Cast an exprt to a isfinite_exprt.
const isnan_exprt & to_isnan_expr(const exprt &expr)
Cast an exprt to a isnan_exprt.
const floatbv_typecast_exprt & to_floatbv_typecast_expr(const exprt &expr)
Cast an exprt to a floatbv_typecast_exprt.
const std::string & id2string(const irep_idt &d)
static std::string binary(const constant_exprt &src)
exprt to_expr(const namespacet &ns, const irep_idt &identifier, const std::string &src)
bool is_true(const literalt &l)
literalt const_literal(bool value)
const literal_exprt & to_literal_expr(const exprt &expr)
Cast a generic exprt to a literal_exprt.
double pow(double x, double y)
API to expression classes for 'mathematical' expressions.
const quantifier_exprt & to_quantifier_expr(const exprt &expr)
Cast an exprt to a quantifier_exprt.
const function_application_exprt & to_function_application_expr(const exprt &expr)
Cast an exprt to a function_application_exprt.
const mathematical_function_typet & to_mathematical_function_type(const typet &type)
Cast a typet to a mathematical_function_typet.
const mp_integer string2integer(const std::string &n, unsigned base)
mp_integer bitwise_or(const mp_integer &a, const mp_integer &b)
bitwise 'or' of two nonnegative integers
const std::string integer2binary(const mp_integer &n, std::size_t width)
const element_address_exprt & to_element_address_expr(const exprt &expr)
Cast an exprt to an element_address_exprt.
const object_address_exprt & to_object_address_expr(const exprt &expr)
Cast an exprt to an object_address_exprt.
const address_of_exprt & to_address_of_expr(const exprt &expr)
Cast an exprt to an address_of_exprt.
const pointer_typet & to_pointer_type(const typet &type)
Cast a typet to a pointer_typet.
const pointer_offset_exprt & to_pointer_offset_expr(const exprt &expr)
Cast an exprt to a pointer_offset_exprt.
const pointer_object_exprt & to_pointer_object_expr(const exprt &expr)
Cast an exprt to a pointer_object_exprt.
const field_address_exprt & to_field_address_expr(const exprt &expr)
Cast an exprt to an field_address_exprt.
std::optional< mp_integer > pointer_offset_size(const typet &type, const namespacet &ns)
Compute the size of a type in bytes, rounding up to full bytes.
std::optional< exprt > size_of_expr(const typet &type, const namespacet &ns)
std::optional< mp_integer > member_offset(const struct_typet &type, const irep_idt &member, const namespacet &ns)
exprt pointer_offset(const exprt &pointer)
exprt object_size(const exprt &pointer)
exprt same_object(const exprt &p1, const exprt &p2)
Various predicates over pointers in programs.
Ranges: pair of begin and end iterators, which can be initialized from containers,...
ranget< iteratort > make_range(iteratort begin, iteratort end)
exprt simplify_expr(exprt src, const namespacet &ns)
static bool has_quantifier(const exprt &expr)
static bool is_zero_width(const typet &type, const namespacet &ns)
Returns true iff type has effective width of zero bits.
static bool is_smt2_simple_identifier(const std::string &identifier)
#define UNEXPECTEDCASE(S)
bool is_smt2_simple_symbol_character(char ch)
void solver(std::vector< framet > &frames, const std::unordered_set< symbol_exprt, irep_hash > &address_taken, const solver_optionst &solver_options, const namespacet &ns, std::vector< propertyt > &properties, std::size_t property_index)
#define CHECK_RETURN(CONDITION)
#define UNREACHABLE
This should be used to mark dead code.
#define DATA_INVARIANT(CONDITION, REASON)
This condition should be used to document that assumptions that are made on goto_functions,...
#define PRECONDITION(CONDITION)
#define INVARIANT_WITH_DIAGNOSTICS(CONDITION, REASON,...)
Same as invariant, with one or more diagnostics attached Diagnostics can be of any type that has a sp...
#define INVARIANT(CONDITION, REASON)
This macro uses the wrapper function 'invariant_violated_string'.
#define CHECK_RETURN_WITH_DIAGNOSTICS(CONDITION,...)
#define DATA_INVARIANT_WITH_DIAGNOSTICS(CONDITION, REASON,...)
#define UNREACHABLE_BECAUSE(REASON)
auto component(T &struct_expr, const irep_idt &name, const namespacet &ns) -> decltype(struct_expr.op0())
API to expression classes.
const struct_exprt & to_struct_expr(const exprt &expr)
Cast an exprt to a struct_exprt.
const array_of_exprt & to_array_of_expr(const exprt &expr)
Cast an exprt to an array_of_exprt.
const binary_relation_exprt & to_binary_relation_expr(const exprt &expr)
Cast an exprt to a binary_relation_exprt.
const unary_plus_exprt & to_unary_plus_expr(const exprt &expr)
Cast an exprt to a unary_plus_exprt.
const index_exprt & to_index_expr(const exprt &expr)
Cast an exprt to an index_exprt.
const mod_exprt & to_mod_expr(const exprt &expr)
Cast an exprt to a mod_exprt.
const mult_exprt & to_mult_expr(const exprt &expr)
Cast an exprt to a mult_exprt.
const array_comprehension_exprt & to_array_comprehension_expr(const exprt &expr)
Cast an exprt to a array_comprehension_exprt.
const ternary_exprt & to_ternary_expr(const exprt &expr)
Cast an exprt to a ternary_exprt.
const named_term_exprt & to_named_term_expr(const exprt &expr)
Cast an exprt to a named_term_exprt.
const cond_exprt & to_cond_expr(const exprt &expr)
Cast an exprt to a cond_exprt.
const typecast_exprt & to_typecast_expr(const exprt &expr)
Cast an exprt to a typecast_exprt.
const div_exprt & to_div_expr(const exprt &expr)
Cast an exprt to a div_exprt.
const binary_exprt & to_binary_expr(const exprt &expr)
Cast an exprt to a binary_exprt.
const plus_exprt & to_plus_expr(const exprt &expr)
Cast an exprt to a plus_exprt.
const notequal_exprt & to_notequal_expr(const exprt &expr)
Cast an exprt to an notequal_exprt.
const unary_exprt & to_unary_expr(const exprt &expr)
Cast an exprt to a unary_exprt.
const multi_ary_exprt & to_multi_ary_expr(const exprt &expr)
Cast an exprt to a multi_ary_exprt.
const let_exprt & to_let_expr(const exprt &expr)
Cast an exprt to a let_exprt.
const abs_exprt & to_abs_expr(const exprt &expr)
Cast an exprt to a abs_exprt.
const if_exprt & to_if_expr(const exprt &expr)
Cast an exprt to an if_exprt.
const member_exprt & to_member_expr(const exprt &expr)
Cast an exprt to a member_exprt.
const minus_exprt & to_minus_expr(const exprt &expr)
Cast an exprt to a minus_exprt.
const union_exprt & to_union_expr(const exprt &expr)
Cast an exprt to a union_exprt.
const constant_exprt & to_constant_expr(const exprt &expr)
Cast an exprt to a constant_exprt.
const not_exprt & to_not_expr(const exprt &expr)
Cast an exprt to an not_exprt.
const symbol_exprt & to_symbol_expr(const exprt &expr)
Cast an exprt to a symbol_exprt.
const with_exprt & to_with_expr(const exprt &expr)
Cast an exprt to a with_exprt.
const implies_exprt & to_implies_expr(const exprt &expr)
Cast an exprt to a implies_exprt.
const update_exprt & to_update_expr(const exprt &expr)
Cast an exprt to an update_exprt.
const unary_minus_exprt & to_unary_minus_expr(const exprt &expr)
Cast an exprt to a unary_minus_exprt.
const equal_exprt & to_equal_expr(const exprt &expr)
Cast an exprt to an equal_exprt.
const nondet_symbol_exprt & to_nondet_symbol_expr(const exprt &expr)
Cast an exprt to a nondet_symbol_exprt.
const sign_exprt & to_sign_expr(const exprt &expr)
Cast an exprt to a sign_exprt.
const euclidean_mod_exprt & to_euclidean_mod_expr(const exprt &expr)
Cast an exprt to a euclidean_mod_exprt.
const range_typet & to_range_type(const typet &type)
Cast a typet to a range_typet.
const code_typet & to_code_type(const typet &type)
Cast a typet to a code_typet.
const struct_typet & to_struct_type(const typet &type)
Cast a typet to a struct_typet.
const struct_tag_typet & to_struct_tag_type(const typet &type)
Cast a typet to a struct_tag_typet.
const complex_typet & to_complex_type(const typet &type)
Cast a typet to a complex_typet.
const array_typet & to_array_type(const typet &type)
Cast a typet to an array_typet.
const struct_union_typet & to_struct_union_type(const typet &type)
Cast a typet to a struct_union_typet.
std::size_t unsafe_string2size_t(const std::string &str, int base)
const string_constantt & to_string_constant(const exprt &expr)