**KLEE analysis** <
> <> %|||% &|Areas| Code coverage, ... |& &|Good if student knows | C, KLEE |& &|Priority| Low |& &|Difficulty| Medium |& &|Benefits to the student| ??? |& &|Benefits to the Tcl Community| Enhanced validation of the Tcl core's correctness, an extended testsuite |& &|Mentor| ??? |& %|||% ***Project Description*** [http://klee.llvm.org/%|%KLEE] is a tool for the /quote/ Unassisted And Automatic Generation Of High-Coverage Tests For Complex Systems Programs /end-quote/. I.e. it takes a C sources as input, symbolically executes all paths and from that derives constraints and test cases which demonstrate bugs in the input. As such it is in the same general area as Coverity and other static analysis tools. In this project the student is asked to use KLEE (and possibly other free tools) to analyze the Tcl core to find bugs which have escaped the maintainers so far, and enhance the testsuite to demonstrate them. The result should be the enhanced testsuite, plus the scripts written to drive KLEE and other tools. Everything which enables future maintainers to reproduce the work and do their own runs. ***References*** * [http://klee.llvm.org/%|%KLEE] * [http://llvm.org/pubs/2008-12-OSDI-KLEE.html%|%OSDI 2008] <> '''Comments & Discussion''' ''Some comments here'' <> <>