Opened 16 years ago

Closed 16 years ago

#138 closed defect (fixed)

source not set for sub-expressions of array subscript expressions

Reported by: Stephen Siegel Owned by: ywei
Priority: minor Milestone:
Component: front Version: 1.0
Keywords: Cc:

Description

If you take the following model simpleArray3.mmp:

int[2][3] a;

void main() {
  a[2][1] = 7;
}

when you verify, it correctly throws an array out of bounds exception for the expression "a[2]". However the source information associated to the expression "a[2]" is null.

Verifying simpleArray3...
               model : simpleArray3 (numProcs = 1)
          sourceFile : examples/simpleArray/simpleArray3.mmp
                mode : VERIFY
              prover : CVC3
            deadlock : ABSOLUTE
           reduction : STANDARD
            simplify : false
             verbose : true
         loop method : false
          repository : examples/simpleArray/TASSREP

Creating dynamic factory 0
Pushed initial state onto stack simpleArray3:

begin State 0
  onStack = true;
  seen = true;
  pathCondition : true
  begin model state
    begin shared variables
    end shared variables;
    begin process 0
      begin global variables
        a = m0v0 (int[2][3]);
      end global variables;
      begin stack frame 0
        function : main;
        location : 0;
      end stack frame 0;
    end process 0;
  end model state
end State 0

Predicate does not hold at current state of simpleArray3.
edu.udel.cis.vsl.minimp.util.ExecutionException: Execution error encountered at null
Possible array out of bounds error:
  array expression = a
  index expression = 2
       index value = 2
      array extent = 2
             query = false
    path condition = true
	at edu.udel.cis.vsl.minimp.semantics.impl.Evaluator.arrayElementReferenceValue(Evaluator.java:173)
	at edu.udel.cis.vsl.minimp.semantics.impl.Evaluator.referenceValue(Evaluator.java:223)
	at edu.udel.cis.vsl.minimp.semantics.impl.Evaluator.arrayElementReferenceValue(Evaluator.java:159)
	at edu.udel.cis.vsl.minimp.semantics.impl.Evaluator.referenceValue(Evaluator.java:223)
	at edu.udel.cis.vsl.minimp.semantics.impl.Executor.assignValue(Executor.java:236)
	at edu.udel.cis.vsl.minimp.semantics.impl.Executor.executeAssignment(Executor.java:243)
	at edu.udel.cis.vsl.minimp.semantics.impl.Executor.execute(Executor.java:99)
	at edu.udel.cis.vsl.minimp.verify.std.StateManager.nextState(StateManager.java:74)
	at edu.udel.cis.vsl.minimp.verify.std.StateManager.nextState(StateManager.java:1)
	at edu.udel.cis.vsl.minimp.search.DfsSearcher.proceedToNewState(DfsSearcher.java:145)
	at edu.udel.cis.vsl.minimp.search.DfsSearcher.search(DfsSearcher.java:107)
	at edu.udel.cis.vsl.minimp.search.DfsSearcher.search(DfsSearcher.java:93)
	at edu.udel.cis.vsl.minimp.verify.Verification.verify(Verification.java:82)
	at simpleArray.SimpleArray3Test.testOutOfBounds(SimpleArray3Test.java:37)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:44)
	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15)
	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:41)
	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20)
	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:28)
	at org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:31)
	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:73)
	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:46)
	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:180)
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:41)
	at org.junit.runners.ParentRunner$1.evaluate(ParentRunner.java:173)
	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:28)
	at org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:31)
	at org.junit.runners.ParentRunner.run(ParentRunner.java:220)
	at org.eclipse.jdt.internal.junit4.runner.JUnit4TestReference.run(JUnit4TestReference.java:46)
	at org.eclipse.jdt.internal.junit.runner.TestExecution.run(TestExecution.java:38)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:467)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:683)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.run(RemoteTestRunner.java:390)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.main(RemoteTestRunner.java:197)
edu.udel.cis.vsl.minimp.util.ExecutionException: Execution error encountered at null
Possible array out of bounds error:
  array expression = a
  index expression = 2
       index value = 2
      array extent = 2
             query = false
    path condition = true
No deadlock possible at this state.
Writing counterexample to simpleArray3.trace...done.
Writing model to simpleArray3.model...done.
STATS:
   statesSeen    : 1
   statesMatched : 0
   statesSaved   : 1
   transitions   : 0
   time          : 0.097s.

RESULT: Some safety properties MAY NOT hold: counterexample found.

Destroying dynamic factory 0

Change History (2)

comment:1 by ywei, 16 years ago

Status: newaccepted

comment:2 by ywei, 16 years ago

Resolution: fixed
Status: acceptedclosed

Fixed. The sub-expressions of an array subscript expression now have source information properly set.

Note: See TracTickets for help on using tickets.