From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ed1-x52e.google.com (mail-ed1-x52e.google.com [IPv6:2a00:1450:4864:20::52e]) by sourceware.org (Postfix) with ESMTPS id 2F1963858D39 for ; Sun, 26 Mar 2023 16:03:49 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 2F1963858D39 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-ed1-x52e.google.com with SMTP id ew6so26202323edb.7 for ; Sun, 26 Mar 2023 09:03:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679846628; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=KY1HAfL569wz/nrwLK1VZ0Umje5xTQQHb97wFltFLr4=; b=VSMSJpMv8L5uCoZEYktim+eAk/jz4Y5qpj1KOF/XcuwvOgsreW4nI7cnkoWSUKqCQw rL3KXoaJ3aY+aYF2n9xHLV/bgThXxKB3xOsA/NBwSylfpNX93uhrm6XxlO/ZLFmyXyqt NzlD7a3jAiTJqD4uvkln5U/x9kAVWIDwr4TJDm59PoLaw9hMUCkTHmmidoHYrVnULwKR lX898MZ8qvMCqFkXLhZpUzUKpp2bOcwMC4/oiEzOgOBMog7EsTZZgEXef7z+47uOOVh3 FJkgjgm3YBYGLOxlUQdoBR8CSIqIZ2ScZxdx8P3vxWyGApAN2ajwyRSjfDU7QVnpKl/u VlLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679846628; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=KY1HAfL569wz/nrwLK1VZ0Umje5xTQQHb97wFltFLr4=; b=UgHskcH6ellE0gl/5EnopePGe7N9DvPQiCBypTvrhMChYUD7nbh8PCNWH5V7Ke/Tjw 68tE+JCpjV2ZQC+8zxsDsKWu3UdHocY1z0DvOOyZ+dp6TLVe21suXzRmLcYo2IDyfNcB f5LivRc+L6MSrJg64Aj/LkSZVaDSgfe+UDKTzOsM53cjnvpA5nTkWHb2eXvS3qmTAmn6 XNct4s71zm+F+zbjYBH0PrSMWdmbGgaU4kQqQ1545JmBvPxFgMsYka/aK8SBBqjB5yZ7 QAoDoocVyqBhIqzKL+7B3QIFhZip044ZzeUkrtz7fLKpZBFYG7unVK6EDcvFP9XrN4h2 BGTQ== X-Gm-Message-State: AAQBX9dAtN7c3QhalJ/0iEqvtg0gIpmnV4a83z5T7JGN3R8/cMbLNNwU yV1WFvCmKbOZtsazlrFWUqt32pl56fVJYA== X-Google-Smtp-Source: AKy350ZECSWulo5g2tq6uSt1GwoPGsqxHNzz7nxOLY5o6nzzAGp6hsJrH2fJAzE/CmYco/SUt3ERgQ== X-Received: by 2002:a17:906:a010:b0:932:fc34:88f with SMTP id p16-20020a170906a01000b00932fc34088fmr11188392ejy.11.1679846627752; Sun, 26 Mar 2023 09:03:47 -0700 (PDT) Received: from smtpclient.apple ([2001:620:618:5c8:2:80b3:0:d8]) by smtp.gmail.com with ESMTPSA id b3-20020a17090636c300b009321cd80fdfsm12766845ejc.158.2023.03.26.09.03.47 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 26 Mar 2023 09:03:47 -0700 (PDT) From: Shengyu Huang Message-Id: <0BED8B95-9F1A-4350-A63C-616D31E405C3@gmail.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_E59717D6-62BE-4DC9-9E54-03E567C4BB69" Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.200.110.1.12\)) Subject: Re: [GSoC][Static Analyzer] First proposal draft and a few more questions/requests Date: Sun, 26 Mar 2023 18:03:37 +0200 In-Reply-To: Cc: GCC Development To: David Malcolm References: <960EE623-1B17-4321-B77E-FBCD9496BE1F@gmail.com> <40fbb064f56845908f797400e5d9443b6cf97fe4.camel@redhat.com> <0e6a972dac60ad290d21a82b428cc76c4e8565e9.camel@redhat.com> <4CBE37A2-7D50-4ECC-9B70-951AB7176D9B@gmail.com> <3dfad33dec50c9f8bfb13e42a29cfb41b6aab457.camel@redhat.com> <2344350B-6AD2-46A5-A335-BD3ECBBAA4DF@gmail.com> X-Mailer: Apple Mail (2.3731.200.110.1.12) X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,KAM_SHORT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: --Apple-Mail=_E59717D6-62BE-4DC9-9E54-03E567C4BB69 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Dave, (I forgot to cc the list in the last email and it was too late to unsend. S= orry for sending you the same email again.) > On 20 Mar 2023, at 23:50, David Malcolm > wrote: >=20 > I think if you try the patch to sm.cc above, then you'll = see > various existing DejaGnu tests below gcc.dg/analyzer will fail with > state explosions. After patching on the latest trunk, the DejaGnu tests report two cases with= state explosion: pr93032-mztools-{signed, unsigned}-char.c I didn=E2=80=99t see any cases with ICE though. In addition, although I did see =E2=80=9Cwarning: terminating analysis for = this program point=E2=80=A6=E2=80=9D in the test log, nothing was reported = when I ran the individual test (with or without gdb)=E2=80=A6Did I miss any= thing? Just by looking at these test files, it seems that it may have to do with h= ow the analyzer does path selection, because there are many nested conditio= nals in these two files. As I mentioned in the proposal, it would be curiou= s if this state explosion only happens for taint analysis, because I don=E2= =80=99t think there is anything special about taint analysis that would cau= se state explosion (unless there is some buggy implementation?). I will look at your latest patch. It seems that there are many useful tips = that can help me further investigate the internals of analyzer. Thanks a lo= t! Best, Shengyu= --Apple-Mail=_E59717D6-62BE-4DC9-9E54-03E567C4BB69--