Example: provenance_equality_global_yx.c

up: index
prev: provenance_equality_global_xy.c
next: provenance_equality_auto_xy.c

1
2
3
4
5
6
7
8
9
10
11
12

    #include <stdio.h>
    #include <string.h> 
    int y=2, x=1;
    int main() {
      int *p = &x + 1;
      int *q = &y;
      printf("Addresses: p=%p q=%p\n",(void*)p,(void*)q);
      _Bool b = (p==q);
      // can this be false even with identical addresses?
      printf("(p==q) = %s\n", b?"true":"false");
      return 0;
    }
[link to run test in Cerberus]

Experimental data (what does this mean?) 



cerberus-concrete-PVI EXECUTION 0 (exit = Specified(0)):
Addresses: p=(@8, 0x50) q=(@7, 0x48)
(p==q) = false

EXECUTION 1 (exit = Specified(0)):
Addresses: p=(@8, 0x50) q=(@7, 0x48)
(p==q) = false


cerberus-concrete-PNVI EXECUTION 0 (exit = Specified(0)):
Addresses: p=(@8, 0x50) q=(@7, 0x48)
(p==q) = false

EXECUTION 1 (exit = Specified(0)):
Addresses: p=(@8, 0x50) q=(@7, 0x48)
(p==q) = false


gcc-8.1-O0 Addresses: p=0x6009b8 q=0x6009b0
(p==q) = false


gcc-8.1-O2 Addresses: p=0x60098c q=0x60098c
(p==q) = false


gcc-8.1-O3 Addresses: p=0x60098c q=0x60098c
(p==q) = false


gcc-8.1-O2-no-strict-aliasing Addresses: p=0x60098c q=0x60098c
(p==q) = false


gcc-8.1-O3-no-strict-aliasing Addresses: p=0x60098c q=0x60098c
(p==q) = false


clang-6.0-O0 Addresses: p=0x601040 q=0x601038
(p==q) = false


clang-6.0-O2 Addresses: p=0x601040 q=0x601038
(p==q) = false


clang-6.0-O3 Addresses: p=0x601040 q=0x601038
(p==q) = false


clang-6.0-O2-no-strict-aliasing Addresses: p=0x601040 q=0x601038
(p==q) = false


clang-6.0-O3-no-strict-aliasing Addresses: p=0x601040 q=0x601038
(p==q) = false


clang-6.0-UBSAN Addresses: p=0x631b58 q=0x631b50
(p==q) = false


clang-6.0-ASAN Addresses: p=0x716ba4 q=0x716b60
(p==q) = false


clang-6.0-MSAN Addresses: p=0x6b7af8 q=0x6b7af0
(p==q) = false


icc-19-O0 Addresses: p=0x600ae8 q=0x600ae0
(p==q) = false


icc-19-O2 Addresses: p=0x6046c8 q=0x6046c0
(p==q) = false


icc-19-O3 Addresses: p=0x6046c8 q=0x6046c0
(p==q) = false


icc-19-O2-no-strict-aliasing Addresses: p=0x6046c8 q=0x6046c0
(p==q) = false


icc-19-O3-no-strict-aliasing Addresses: p=0x6046c8 q=0x6046c0
(p==q) = false


compcert-3.4 Addresses: p=0x601040 q=0x601038
(p==q) = false


compcert-3.4-O Addresses: p=0x601040 q=0x601038
(p==q) = false


kcc-1.0 Addresses: p=(nil) q=(nil)
(p==q) = true
Comparison of unspecified value:
      > in main at provenance_equality_global_yx.c:10:3

    Unspecified value or behavior (USP-CERL7):
        see C11 section 6.5.9 http://rvdoc.org/C11/6.5.9
        see MISRA-C section 8.1:3 http://rvdoc.org/MISRA-C/8.1