haybale 0.7.2

Symbolic execution of LLVM IR, written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140

; ModuleID = 'memory.c'
source_filename = "memory.c"
target datalayout = "e-m:o-i64:64-f80:128-n8:16:32:64-S128"
target triple = "x86_64-apple-macosx10.15.0"

; Function Attrs: nofree norecurse nounwind ssp uwtable
define i32 @load_and_store(i32*, i32) local_unnamed_addr #0 {
  %3 = add nsw i32 %1, -3
  store volatile i32 %3, i32* %0, align 4, !tbaa !3
  %4 = load volatile i32, i32* %0, align 4, !tbaa !3
  ret i32 %4
}

; Function Attrs: nounwind ssp uwtable
define i32 @local_ptr(i32) local_unnamed_addr #1 {
  %2 = alloca i32, align 4
  %3 = bitcast i32* %2 to i8*
  call void @llvm.lifetime.start.p0i8(i64 4, i8* nonnull %3)
  %4 = add nsw i32 %0, -3
  store volatile i32 %4, i32* %2, align 4, !tbaa !3
  %5 = load volatile i32, i32* %2, align 4, !tbaa !3
  call void @llvm.lifetime.end.p0i8(i64 4, i8* nonnull %3)
  ret i32 %5
}

; Function Attrs: argmemonly nounwind
declare void @llvm.lifetime.start.p0i8(i64 immarg, i8* nocapture) #2

; Function Attrs: argmemonly nounwind
declare void @llvm.lifetime.end.p0i8(i64 immarg, i8* nocapture) #2

; Function Attrs: nofree norecurse nounwind ssp uwtable
define i32 @overwrite(i32*, i32) local_unnamed_addr #0 {
  store volatile i32 0, i32* %0, align 4, !tbaa !3
  store volatile i32 2, i32* %0, align 4, !tbaa !3
  %3 = add nsw i32 %1, -3
  store volatile i32 %3, i32* %0, align 4, !tbaa !3
  %4 = load volatile i32, i32* %0, align 4, !tbaa !3
  ret i32 %4
}

; Function Attrs: nofree norecurse nounwind ssp uwtable
define i32 @load_and_store_mult(i32*, i32) local_unnamed_addr #0 {
  store volatile i32 %1, i32* %0, align 4, !tbaa !3
  %3 = load volatile i32, i32* %0, align 4, !tbaa !3
  %4 = add nsw i32 %3, 10
  store volatile i32 %4, i32* %0, align 4, !tbaa !3
  %5 = load volatile i32, i32* %0, align 4, !tbaa !3
  %6 = add nsw i32 %5, -13
  store volatile i32 %6, i32* %0, align 4, !tbaa !3
  %7 = load volatile i32, i32* %0, align 4, !tbaa !3
  ret i32 %7
}

; Function Attrs: nofree norecurse nounwind ssp uwtable
define i32 @array(i32*, i32) local_unnamed_addr #0 {
  %3 = add nsw i32 %1, -3
  %4 = getelementptr inbounds i32, i32* %0, i64 10
  store volatile i32 %3, i32* %4, align 4, !tbaa !3
  %5 = add nsw i32 %1, 3
  store volatile i32 %5, i32* %0, align 4, !tbaa !3
  %6 = load volatile i32, i32* %4, align 4, !tbaa !3
  ret i32 %6
}

; Function Attrs: nofree norecurse nounwind ssp uwtable
define i32 @pointer_arith(i32*, i32) local_unnamed_addr #0 {
  store volatile i32 %1, i32* %0, align 4, !tbaa !3
  %3 = getelementptr inbounds i32, i32* %0, i64 1
  %4 = add nsw i32 %1, -1
  store volatile i32 %4, i32* %3, align 4, !tbaa !3
  %5 = getelementptr inbounds i32, i32* %0, i64 2
  %6 = add nsw i32 %1, -2
  store volatile i32 %6, i32* %5, align 4, !tbaa !3
  %7 = getelementptr inbounds i32, i32* %0, i64 3
  %8 = add nsw i32 %1, -3
  store volatile i32 %8, i32* %7, align 4, !tbaa !3
  %9 = getelementptr inbounds i32, i32* %0, i64 4
  %10 = add nsw i32 %1, -4
  store volatile i32 %10, i32* %9, align 4, !tbaa !3
  %11 = getelementptr inbounds i32, i32* %0, i64 5
  %12 = add nsw i32 %1, -5
  store volatile i32 %12, i32* %11, align 4, !tbaa !3
  %13 = getelementptr inbounds i32, i32* %0, i64 6
  %14 = add nsw i32 %1, -6
  store volatile i32 %14, i32* %13, align 4, !tbaa !3
  %15 = load volatile i32, i32* %7, align 4, !tbaa !3
  ret i32 %15
}

; Function Attrs: nounwind ssp uwtable
define i32 @pointer_compare(i32) local_unnamed_addr #1 {
  %2 = alloca i32, align 4
  %3 = alloca i32, align 4
  %4 = alloca i32*, align 8
  %5 = alloca i32*, align 8
  %6 = bitcast i32* %2 to i8*
  call void @llvm.lifetime.start.p0i8(i64 4, i8* nonnull %6) #3
  %7 = bitcast i32* %3 to i8*
  call void @llvm.lifetime.start.p0i8(i64 4, i8* nonnull %7) #3
  %8 = bitcast i32** %4 to i8*
  call void @llvm.lifetime.start.p0i8(i64 8, i8* nonnull %8)
  store volatile i32* %2, i32** %4, align 8, !tbaa !7
  %9 = bitcast i32** %5 to i8*
  call void @llvm.lifetime.start.p0i8(i64 8, i8* nonnull %9)
  store volatile i32* %3, i32** %5, align 8, !tbaa !7
  %10 = add nsw i32 %0, -3
  %11 = load volatile i32*, i32** %4, align 8, !tbaa !7
  store volatile i32 %10, i32* %11, align 4, !tbaa !3
  %12 = load volatile i32*, i32** %4, align 8, !tbaa !7
  %13 = load volatile i32*, i32** %5, align 8, !tbaa !7
  %14 = icmp eq i32* %12, %13
  %15 = load volatile i32*, i32** %4, align 8, !tbaa !7
  %16 = load volatile i32, i32* %15, align 4, !tbaa !3
  %17 = add nsw i32 %16, -100
  %18 = select i1 %14, i32 %17, i32 %16
  call void @llvm.lifetime.end.p0i8(i64 8, i8* nonnull %9)
  call void @llvm.lifetime.end.p0i8(i64 8, i8* nonnull %8)
  call void @llvm.lifetime.end.p0i8(i64 4, i8* nonnull %7) #3
  call void @llvm.lifetime.end.p0i8(i64 4, i8* nonnull %6) #3
  ret i32 %18
}

attributes #0 = { nofree norecurse nounwind ssp uwtable "correctly-rounded-divide-sqrt-fp-math"="false" "disable-tail-calls"="false" "less-precise-fpmad"="false" "min-legal-vector-width"="0" "no-frame-pointer-elim"="true" "no-frame-pointer-elim-non-leaf" "no-infs-fp-math"="false" "no-jump-tables"="false" "no-nans-fp-math"="false" "no-signed-zeros-fp-math"="false" "no-trapping-math"="false" "stack-protector-buffer-size"="8" "target-cpu"="penryn" "target-features"="+cx16,+cx8,+fxsr,+mmx,+sahf,+sse,+sse2,+sse3,+sse4.1,+ssse3,+x87" "unsafe-fp-math"="false" "use-soft-float"="false" }
attributes #1 = { nounwind ssp uwtable "correctly-rounded-divide-sqrt-fp-math"="false" "disable-tail-calls"="false" "less-precise-fpmad"="false" "min-legal-vector-width"="0" "no-frame-pointer-elim"="true" "no-frame-pointer-elim-non-leaf" "no-infs-fp-math"="false" "no-jump-tables"="false" "no-nans-fp-math"="false" "no-signed-zeros-fp-math"="false" "no-trapping-math"="false" "stack-protector-buffer-size"="8" "target-cpu"="penryn" "target-features"="+cx16,+cx8,+fxsr,+mmx,+sahf,+sse,+sse2,+sse3,+sse4.1,+ssse3,+x87" "unsafe-fp-math"="false" "use-soft-float"="false" }
attributes #2 = { argmemonly nounwind }
attributes #3 = { nounwind }

!llvm.module.flags = !{!0, !1}
!llvm.ident = !{!2}

!0 = !{i32 1, !"wchar_size", i32 4}
!1 = !{i32 7, !"PIC Level", i32 2}
!2 = !{!"clang version 9.0.1 "}
!3 = !{!4, !4, i64 0}
!4 = !{!"int", !5, i64 0}
!5 = !{!"omnipotent char", !6, i64 0}
!6 = !{!"Simple C/C++ TBAA"}
!7 = !{!8, !8, i64 0}
!8 = !{!"any pointer", !5, i64 0}