• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

formalsec / smtml / 327

07 May 2025 05:57PM UTC coverage: 56.38% (+0.4%) from 56.0%
327

push

github

filipeom
Format code

0 of 2 new or added lines in 1 file covered. (0.0%)

53 existing lines in 1 file now uncovered.

950 of 1685 relevant lines covered (56.38%)

11.76 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

33.41
/src/smtml/expr.ml
1
(* SPDX-License-Identifier: MIT *)
2
(* Copyright (C) 2023-2024 formalsec *)
3
(* Written by the Smtml programmers *)
4

5
type t = expr Hc.hash_consed
6

7
and expr =
8
  | Val of Value.t
9
  | Ptr of
10
      { base : int32
11
      ; offset : t
12
      }
13
  | Symbol of Symbol.t
14
  | List of t list
15
  | App of Symbol.t * t list
16
  | Unop of Ty.t * Ty.Unop.t * t
17
  | Binop of Ty.t * Ty.Binop.t * t * t
18
  | Triop of Ty.t * Ty.Triop.t * t * t * t
19
  | Relop of Ty.t * Ty.Relop.t * t * t
20
  | Cvtop of Ty.t * Ty.Cvtop.t * t
21
  | Naryop of Ty.t * Ty.Naryop.t * t list
22
  | Extract of t * int * int
23
  | Concat of t * t
24
  | Binder of Binder.t * t list * t
25

26
module Expr = struct
27
  type t = expr
28

29
  let list_eq (l1 : 'a list) (l2 : 'a list) : bool =
30
    if List.compare_lengths l1 l2 = 0 then List.for_all2 phys_equal l1 l2
4✔
31
    else false
×
32

33
  let equal (e1 : expr) (e2 : expr) : bool =
34
    match (e1, e2) with
494✔
35
    | Val v1, Val v2 -> Value.equal v1 v2
468✔
36
    | Ptr { base = b1; offset = o1 }, Ptr { base = b2; offset = o2 } ->
3✔
37
      Int32.equal b1 b2 && phys_equal o1 o2
3✔
38
    | Symbol s1, Symbol s2 -> Symbol.equal s1 s2
6✔
39
    | List l1, List l2 -> list_eq l1 l2
4✔
40
    | App (s1, l1), App (s2, l2) -> Symbol.equal s1 s2 && list_eq l1 l2
×
41
    | Unop (t1, op1, e1), Unop (t2, op2, e2) ->
×
42
      Ty.equal t1 t2 && Ty.Unop.equal op1 op2 && phys_equal e1 e2
×
43
    | Binop (t1, op1, e1, e3), Binop (t2, op2, e2, e4) ->
12✔
44
      Ty.equal t1 t2 && Ty.Binop.equal op1 op2 && phys_equal e1 e2
12✔
45
      && phys_equal e3 e4
12✔
46
    | Relop (t1, op1, e1, e3), Relop (t2, op2, e2, e4) ->
1✔
47
      Ty.equal t1 t2 && Ty.Relop.equal op1 op2 && phys_equal e1 e2
1✔
48
      && phys_equal e3 e4
1✔
49
    | Triop (t1, op1, e1, e3, e5), Triop (t2, op2, e2, e4, e6) ->
×
50
      Ty.equal t1 t2 && Ty.Triop.equal op1 op2 && phys_equal e1 e2
×
51
      && phys_equal e3 e4 && phys_equal e5 e6
×
52
    | Cvtop (t1, op1, e1), Cvtop (t2, op2, e2) ->
×
53
      Ty.equal t1 t2 && Ty.Cvtop.equal op1 op2 && phys_equal e1 e2
×
54
    | Naryop (t1, op1, l1), Naryop (t2, op2, l2) ->
×
55
      Ty.equal t1 t2 && Ty.Naryop.equal op1 op2 && list_eq l1 l2
×
56
    | Extract (e1, h1, l1), Extract (e2, h2, l2) ->
×
57
      phys_equal e1 e2 && h1 = h2 && l1 = l2
×
58
    | Concat (e1, e3), Concat (e2, e4) -> phys_equal e1 e2 && phys_equal e3 e4
×
59
    | Binder (binder1, vars1, e1), Binder (binder2, vars2, e2) ->
×
60
      Binder.equal binder1 binder2 && list_eq vars1 vars2 && phys_equal e1 e2
×
61
    | ( ( Val _ | Ptr _ | Symbol _ | List _ | App _ | Unop _ | Binop _ | Triop _
×
62
        | Relop _ | Cvtop _ | Naryop _ | Extract _ | Concat _ | Binder _ )
×
63
      , _ ) ->
64
      false
65

66
  let hash (e : expr) : int =
67
    let h x = Hashtbl.hash x in
964✔
68
    match e with
69
    | Val v -> h v
834✔
70
    | Ptr { base; offset } -> h (base, offset.tag)
13✔
71
    | Symbol s -> h s
36✔
72
    | List v -> h v
16✔
73
    | App (x, es) -> h (x, es)
×
74
    | Unop (ty, op, e) -> h (ty, op, e.tag)
4✔
75
    | Cvtop (ty, op, e) -> h (ty, op, e.tag)
6✔
76
    | Binop (ty, op, e1, e2) -> h (ty, op, e1.tag, e2.tag)
34✔
77
    | Relop (ty, op, e1, e2) -> h (ty, op, e1.tag, e2.tag)
3✔
78
    | Triop (ty, op, e1, e2, e3) -> h (ty, op, e1.tag, e2.tag, e3.tag)
×
79
    | Naryop (ty, op, es) -> h (ty, op, es)
×
80
    | Extract (e, hi, lo) -> h (e.tag, hi, lo)
14✔
81
    | Concat (e1, e2) -> h (e1.tag, e2.tag)
4✔
82
    | Binder (b, vars, e) -> h (b, vars, e.tag)
×
83
end
84

85
module Hc = Hc.Make [@inlined hint] (Expr)
86

87
let equal (hte1 : t) (hte2 : t) = phys_equal hte1 hte2 [@@inline]
219✔
88

89
let hash (hte : t) = hte.tag [@@inline]
4✔
90

91
module Key = struct
92
  type nonrec t = t
93

94
  let to_int hte = hash hte
×
95
end
96

97
let[@inline] make e = Hc.hashcons e
729✔
98

99
let[@inline] view (hte : t) = hte.node
510✔
100

101
let[@inline] compare (hte1 : t) (hte2 : t) = compare hte1.tag hte2.tag
×
102

103
let symbol s = make (Symbol s)
21✔
104

105
(** The return type of an expression *)
106
let rec ty (hte : t) : Ty.t =
107
  match view hte with
13✔
108
  | Val x -> Value.type_of x
×
109
  | Ptr _ -> Ty_bitv 32
×
110
  | Symbol x -> Symbol.type_of x
10✔
111
  | List _ -> Ty_list
×
112
  | App _ -> Ty_app
×
113
  | Unop (ty, _, _) -> ty
×
114
  | Binop (ty, _, _, _) -> ty
×
115
  | Triop (_, Ite, _, hte1, hte2) ->
×
116
    let ty1 = ty hte1 in
117
    let ty2 = ty hte2 in
×
118
    assert (Ty.equal ty1 ty2);
×
119
    ty1
120
  | Triop (ty, _, _, _, _) -> ty
×
121
  | Relop (ty, _, _, _) -> ty
×
122
  | Cvtop (_, (Zero_extend m | Sign_extend m), hte) -> (
×
123
    match ty hte with Ty_bitv n -> Ty_bitv (n + m) | _ -> assert false )
1✔
124
  | Cvtop (ty, _, _) -> ty
×
125
  | Naryop (ty, _, _) -> ty
×
126
  | Extract (_, h, l) -> Ty_bitv ((h - l) * 8)
2✔
127
  | Concat (e1, e2) -> (
×
128
    match (ty e1, ty e2) with
×
129
    | Ty_bitv n1, Ty_bitv n2 -> Ty_bitv (n1 + n2)
×
130
    | t1, t2 ->
×
131
      Fmt.failwith "Invalid concat of (%a) with (%a)" Ty.pp t1 Ty.pp t2 )
132
  | Binder (_, _, e) -> ty e
×
133

134
let rec is_symbolic (v : t) : bool =
135
  match view v with
×
136
  | Val _ -> false
×
137
  | Symbol _ -> true
×
138
  | Ptr { offset; _ } -> is_symbolic offset
×
139
  | List vs -> List.exists is_symbolic vs
×
140
  | App (_, vs) -> List.exists is_symbolic vs
×
141
  | Unop (_, _, v) -> is_symbolic v
×
142
  | Binop (_, _, v1, v2) -> is_symbolic v1 || is_symbolic v2
×
143
  | Triop (_, _, v1, v2, v3) ->
×
144
    is_symbolic v1 || is_symbolic v2 || is_symbolic v3
×
145
  | Cvtop (_, _, v) -> is_symbolic v
×
146
  | Relop (_, _, v1, v2) -> is_symbolic v1 || is_symbolic v2
×
147
  | Naryop (_, _, vs) -> List.exists is_symbolic vs
×
148
  | Extract (e, _, _) -> is_symbolic e
×
149
  | Concat (e1, e2) -> is_symbolic e1 || is_symbolic e2
×
150
  | Binder (_, _, e) -> is_symbolic e
×
151

152
let get_symbols (hte : t list) =
153
  let tbl = Hashtbl.create 64 in
×
154
  let rec symbols (hte : t) =
×
155
    match view hte with
×
156
    | Val _ -> ()
×
157
    | Ptr { offset; _ } -> symbols offset
×
158
    | Symbol s -> Hashtbl.replace tbl s ()
×
159
    | List es -> List.iter symbols es
×
160
    | App (_, es) -> List.iter symbols es
×
161
    | Unop (_, _, e1) -> symbols e1
×
162
    | Binop (_, _, e1, e2) ->
×
163
      symbols e1;
164
      symbols e2
×
165
    | Triop (_, _, e1, e2, e3) ->
×
166
      symbols e1;
167
      symbols e2;
×
168
      symbols e3
×
169
    | Relop (_, _, e1, e2) ->
×
170
      symbols e1;
171
      symbols e2
×
172
    | Cvtop (_, _, e) -> symbols e
×
173
    | Naryop (_, _, es) -> List.iter symbols es
×
174
    | Extract (e, _, _) -> symbols e
×
175
    | Concat (e1, e2) ->
×
176
      symbols e1;
177
      symbols e2
×
178
    | Binder (_, vars, e) ->
×
179
      List.iter symbols vars;
180
      symbols e
×
181
  in
182
  List.iter symbols hte;
183
  Hashtbl.fold (fun k () acc -> k :: acc) tbl []
×
184

185
let negate_relop (hte : t) : (t, string) Result.t =
186
  let e =
×
187
    match view hte with
188
    | Relop (ty, Eq, e1, e2) -> Ok (Relop (ty, Ne, e1, e2))
×
189
    | Relop (ty, Ne, e1, e2) -> Ok (Relop (ty, Eq, e1, e2))
×
190
    | Relop (ty, Lt, e1, e2) -> Ok (Relop (ty, Ge, e1, e2))
×
191
    | Relop (ty, LtU, e1, e2) -> Ok (Relop (ty, GeU, e1, e2))
×
192
    | Relop (ty, Le, e1, e2) -> Ok (Relop (ty, Gt, e1, e2))
×
193
    | Relop (ty, LeU, e1, e2) -> Ok (Relop (ty, GtU, e1, e2))
×
194
    | Relop (ty, Gt, e1, e2) -> Ok (Relop (ty, Le, e1, e2))
×
195
    | Relop (ty, GtU, e1, e2) -> Ok (Relop (ty, LeU, e1, e2))
×
196
    | Relop (ty, Ge, e1, e2) -> Ok (Relop (ty, Lt, e1, e2))
×
197
    | Relop (ty, GeU, e1, e2) -> Ok (Relop (ty, LtU, e1, e2))
×
198
    | _ -> Error "negate_relop: not a relop."
×
199
  in
200
  Result.map make e
201

202
module Set = struct
203
  include PatriciaTree.MakeHashconsedSet (Key) ()
204

205
  let hash = to_int
206

207
  let get_symbols (set : t) =
208
    let tbl = Hashtbl.create 64 in
×
209
    let rec symbols hte =
×
210
      match view hte with
×
211
      | Val _ -> ()
×
212
      | Ptr { offset; _ } -> symbols offset
×
213
      | Symbol s -> Hashtbl.replace tbl s ()
×
214
      | List es -> List.iter symbols es
×
215
      | App (_, es) -> List.iter symbols es
×
216
      | Unop (_, _, e1) -> symbols e1
×
217
      | Binop (_, _, e1, e2) ->
×
218
        symbols e1;
219
        symbols e2
×
220
      | Triop (_, _, e1, e2, e3) ->
×
221
        symbols e1;
222
        symbols e2;
×
223
        symbols e3
×
224
      | Relop (_, _, e1, e2) ->
×
225
        symbols e1;
226
        symbols e2
×
227
      | Cvtop (_, _, e) -> symbols e
×
228
      | Naryop (_, _, es) -> List.iter symbols es
×
229
      | Extract (e, _, _) -> symbols e
×
230
      | Concat (e1, e2) ->
×
231
        symbols e1;
232
        symbols e2
×
233
      | Binder (_, vars, e) ->
×
234
        List.iter symbols vars;
235
        symbols e
×
236
    in
237
    iter symbols set;
238
    Hashtbl.fold (fun k () acc -> k :: acc) tbl []
×
239
end
240

241
module Pp = struct
242
  let rec pp fmt (hte : t) =
243
    match view hte with
×
244
    | Val v -> Value.pp fmt v
×
245
    | Ptr { base; offset } -> Fmt.pf fmt "(Ptr (i32 %ld) %a)" base pp offset
×
246
    | Symbol s -> Fmt.pf fmt "@[<hov 1>%a@]" Symbol.pp s
×
247
    | List v -> Fmt.pf fmt "@[<hov 1>[%a]@]" (Fmt.list ~sep:Fmt.comma pp) v
×
248
    | App (s, v) ->
×
249
      Fmt.pf fmt "@[<hov 1>(%a@ %a)@]" Symbol.pp s
250
        (Fmt.list ~sep:Fmt.comma pp)
×
251
        v
252
    | Unop (ty, op, e) ->
×
253
      Fmt.pf fmt "@[<hov 1>(%a.%a@ %a)@]" Ty.pp ty Ty.Unop.pp op pp e
254
    | Binop (ty, op, e1, e2) ->
×
255
      Fmt.pf fmt "@[<hov 1>(%a.%a@ %a@ %a)@]" Ty.pp ty Ty.Binop.pp op pp e1 pp
256
        e2
257
    | Triop (ty, op, e1, e2, e3) ->
×
258
      Fmt.pf fmt "@[<hov 1>(%a.%a@ %a@ %a@ %a)@]" Ty.pp ty Ty.Triop.pp op pp e1
259
        pp e2 pp e3
260
    | Relop (ty, op, e1, e2) ->
×
261
      Fmt.pf fmt "@[<hov 1>(%a.%a@ %a@ %a)@]" Ty.pp ty Ty.Relop.pp op pp e1 pp
262
        e2
263
    | Cvtop (ty, op, e) ->
×
264
      Fmt.pf fmt "@[<hov 1>(%a.%a@ %a)@]" Ty.pp ty Ty.Cvtop.pp op pp e
265
    | Naryop (ty, op, es) ->
×
266
      Fmt.pf fmt "@[<hov 1>(%a.%a@ (%a))@]" Ty.pp ty Ty.Naryop.pp op
267
        (Fmt.list ~sep:Fmt.comma pp)
×
268
        es
269
    | Extract (e, h, l) ->
×
270
      Fmt.pf fmt "@[<hov 1>(extract@ %a@ %d@ %d)@]" pp e l h
271
    | Concat (e1, e2) -> Fmt.pf fmt "@[<hov 1>(++@ %a@ %a)@]" pp e1 pp e2
×
272
    | Binder (b, vars, e) ->
×
273
      Fmt.pf fmt "@[<hov 1>(%a@ (%a)@ %a)@]" Binder.pp b
274
        (Fmt.list ~sep:Fmt.sp pp) vars pp e
×
275

276
  let pp_list fmt (es : t list) = Fmt.hovbox (Fmt.list ~sep:Fmt.comma pp) fmt es
×
277

278
  let pp_smt fmt (es : t list) : unit =
279
    let pp_symbols fmt syms =
×
280
      Fmt.list ~sep:Fmt.semi
×
281
        (fun fmt sym ->
282
          let t = Symbol.type_of sym in
×
283
          Fmt.pf fmt "(let-const %a %a)" Symbol.pp sym Ty.pp t )
×
284
        fmt syms
285
    in
286
    let pp_asserts fmt es =
287
      Fmt.list ~sep:Fmt.semi
×
288
        (fun fmt e -> Fmt.pf fmt "(assert @[<h 2>%a@])" pp e)
×
289
        fmt es
290
    in
291
    let syms = get_symbols es in
292
    if List.length syms > 0 then Fmt.pf fmt "%a@\n" pp_symbols syms;
×
293
    if List.length es > 0 then Fmt.pf fmt "%a@\n" pp_asserts es;
×
294
    Fmt.string fmt "(check-sat)"
×
295
end
296

297
let pp = Pp.pp
298

299
let pp_list = Pp.pp_list
300

301
let pp_smt = Pp.pp_smt
302

303
let to_string e = Fmt.str "%a" pp e
×
304

305
let value (v : Value.t) : t = make (Val v) [@@inline]
651✔
306

307
let ptr base offset = make (Ptr { base; offset })
8✔
308

309
let list l = make (List l)
5✔
310

311
let app symbol args = make (App (symbol, args))
×
312

313
let[@inline] binder bt vars expr = make (Binder (bt, vars, expr))
×
314

315
let let_in vars body = binder Let_in vars body
×
316

317
let forall vars body = binder Forall vars body
×
318

319
let exists vars body = binder Exists vars body
×
320

321
let raw_unop ty op hte = make (Unop (ty, op, hte)) [@@inline]
2✔
322

323
let unop ty op hte =
324
  match (op, view hte) with
32✔
325
  | Ty.Unop.(Regexp_loop _ | Regexp_star), _ -> raw_unop ty op hte
×
326
  | _, Val v -> value (Eval.unop ty op v)
23✔
327
  | Not, Unop (_, Not, hte') -> hte'
1✔
NEW
328
  | Not, Relop (t, Eq, a, b) -> make (Relop (t, Ne, a, b))
×
NEW
329
  | Not, Relop (t, Ne, a, b) -> make (Relop (t, Eq, a, b))
×
330
  | Neg, Unop (_, Neg, hte') -> hte'
1✔
331
  | Trim, Cvtop (Ty_real, ToString, _) -> hte
×
332
  | Head, List (hd :: _) -> hd
1✔
333
  | Tail, List (_ :: tl) -> make (List tl)
1✔
334
  | Reverse, List es -> make (List (List.rev es))
2✔
335
  | Length, List es -> value (Int (List.length es))
1✔
336
  | _ -> raw_unop ty op hte
2✔
337

338
let raw_binop ty op hte1 hte2 = make (Binop (ty, op, hte1, hte2)) [@@inline]
23✔
339

340
let rec binop ty op hte1 hte2 =
341
  match (op, view hte1, view hte2) with
96✔
342
  | Ty.Binop.(String_in_re | Regexp_range), _, _ -> raw_binop ty op hte1 hte2
×
343
  | op, Val v1, Val v2 -> value (Eval.binop ty op v1 v2)
67✔
344
  | Sub, Ptr { base = b1; offset = os1 }, Ptr { base = b2; offset = os2 } ->
1✔
345
    if Int32.equal b1 b2 then binop ty Sub os1 os2
1✔
346
    else raw_binop ty op hte1 hte2
×
347
  | Add, Ptr { base; offset }, _ ->
1✔
348
    ptr base (binop (Ty_bitv 32) Add offset hte2)
1✔
349
  | Sub, Ptr { base; offset }, _ ->
1✔
350
    ptr base (binop (Ty_bitv 32) Sub offset hte2)
1✔
351
  | Rem, Ptr { base; offset }, _ ->
1✔
352
    let rhs = value (Bitv (Bitvector.of_int32 base)) in
1✔
353
    let addr = binop (Ty_bitv 32) Add rhs offset in
1✔
354
    binop ty Rem addr hte2
1✔
355
  | Add, _, Ptr { base; offset } ->
1✔
356
    ptr base (binop (Ty_bitv 32) Add offset hte1)
1✔
357
  | Sub, _, Ptr { base; offset } ->
×
358
    let base = value (Bitv (Bitvector.of_int32 base)) in
×
359
    binop ty Sub hte1 (binop (Ty_bitv 32) Add base offset)
×
360
  | (Add | Or), Val (Bitv bv), _ when Bitvector.eqz bv -> hte2
×
361
  | (And | Div | DivU | Mul | Rem | RemU), Val (Bitv bv), _
×
362
    when Bitvector.eqz bv ->
3✔
363
    hte1
1✔
364
  | (Add | Or), _, Val (Bitv bv) when Bitvector.eqz bv -> hte1
×
365
  | (And | Mul), _, Val (Bitv bv) when Bitvector.eqz bv -> hte2
1✔
366
  | Add, Binop (ty, Add, x, { node = Val v1; _ }), Val v2 ->
1✔
367
    let v = value (Eval.binop ty Add v1 v2) in
1✔
368
    raw_binop ty Add x v
1✔
369
  | Sub, Binop (ty, Sub, x, { node = Val v1; _ }), Val v2 ->
1✔
370
    let v = value (Eval.binop ty Add v1 v2) in
1✔
371
    raw_binop ty Sub x v
1✔
372
  | Mul, Binop (ty, Mul, x, { node = Val v1; _ }), Val v2 ->
1✔
373
    let v = value (Eval.binop ty Mul v1 v2) in
1✔
374
    raw_binop ty Mul x v
1✔
375
  | Add, Val v1, Binop (ty, Add, x, { node = Val v2; _ }) ->
1✔
376
    let v = value (Eval.binop ty Add v1 v2) in
1✔
377
    raw_binop ty Add v x
1✔
378
  | Mul, Val v1, Binop (ty, Mul, x, { node = Val v2; _ }) ->
1✔
379
    let v = value (Eval.binop ty Mul v1 v2) in
1✔
380
    raw_binop ty Mul v x
1✔
381
  | At, List es, Val (Int n) ->
1✔
382
    (* TODO: use another datastructure? *)
383
    begin
384
      match List.nth_opt es n with None -> assert false | Some v -> v
1✔
385
    end
386
  | List_cons, _, List es -> make (List (hte1 :: es))
1✔
387
  | List_append, List _, (List [] | Val (List [])) -> hte1
×
388
  | List_append, (List [] | Val (List [])), List _ -> hte2
×
389
  | List_append, List l0, Val (List l1) -> make (List (l0 @ List.map value l1))
1✔
390
  | List_append, Val (List l0), List l1 -> make (List (List.map value l0 @ l1))
×
391
  | List_append, List l0, List l1 -> make (List (l0 @ l1))
×
392
  | _ -> raw_binop ty op hte1 hte2
12✔
393

394
let raw_triop ty op e1 e2 e3 = make (Triop (ty, op, e1, e2, e3)) [@@inline]
×
395

396
let triop ty op e1 e2 e3 =
397
  match (op, view e1, view e2, view e3) with
6✔
398
  | Ty.Triop.Ite, Val True, _, _ -> e2
1✔
399
  | Ite, Val False, _, _ -> e3
1✔
400
  | op, Val v1, Val v2, Val v3 -> value (Eval.triop ty op v1 v2 v3)
4✔
401
  | Ite, _, Triop (_, Ite, c2, r1, r2), Triop (_, Ite, _, _, _) ->
×
402
    let else_ = raw_triop ty Ite e1 r2 e3 in
403
    let cond = binop Ty_bool And e1 c2 in
×
404
    raw_triop ty Ite cond r1 else_
×
405
  | _ -> raw_triop ty op e1 e2 e3
×
406

407
let raw_relop ty op hte1 hte2 = make (Relop (ty, op, hte1, hte2)) [@@inline]
2✔
408

409
let rec relop ty op hte1 hte2 =
410
  match (op, view hte1, view hte2) with
77✔
411
  | op, Val v1, Val v2 -> value (if Eval.relop ty op v1 v2 then True else False)
29✔
412
  | Ty.Relop.Ne, Val (Real v), _ | Ne, _, Val (Real v) ->
×
413
    if Float.is_nan v || Float.is_infinite v then value True
×
414
    else raw_relop ty op hte1 hte2
×
415
  | _, Val (Real v), _ | _, _, Val (Real v) ->
×
416
    if Float.is_nan v || Float.is_infinite v then value False
×
417
    else raw_relop ty op hte1 hte2
×
418
  | Eq, _, Val Nothing | Eq, Val Nothing, _ -> value False
×
419
  | Ne, _, Val Nothing | Ne, Val Nothing, _ -> value True
×
420
  | Eq, _, Val (App (`Op "symbol", [ Str _ ]))
×
421
  | Eq, Val (App (`Op "symbol", [ Str _ ])), _ ->
×
422
    value False
423
  | Ne, _, Val (App (`Op "symbol", [ Str _ ]))
×
424
  | Ne, Val (App (`Op "symbol", [ Str _ ])), _ ->
×
425
    value True
426
  | Eq, Ptr { base = b1; offset = os1 }, Ptr { base = b2; offset = os2 } ->
2✔
427
    if Int32.equal b1 b2 then relop Ty_bool Eq os1 os2 else value False
1✔
428
  | Ne, Ptr { base = b1; offset = os1 }, Ptr { base = b2; offset = os2 } ->
2✔
429
    if Int32.equal b1 b2 then relop Ty_bool Ne os1 os2 else value True
1✔
430
  | ( (LtU | LeU)
2✔
431
    , Ptr { base = b1; offset = os1 }
432
    , Ptr { base = b2; offset = os2 } ) ->
433
    if Int32.equal b1 b2 then relop ty op os1 os2
2✔
434
    else
435
      let b1 = Value.Bitv (Bitvector.of_int32 b1) in
2✔
436
      let b2 = Value.Bitv (Bitvector.of_int32 b2) in
2✔
437
      value (if Eval.relop ty op b1 b2 then True else False)
1✔
438
  | ( op
2✔
439
    , Val (Bitv _ as n)
440
    , Ptr { base; offset = { node = Val (Bitv _ as o); _ } } ) ->
441
    let base = Eval.binop (Ty_bitv 32) Add (Bitv (Bitvector.of_int32 base)) o in
2✔
442
    value (if Eval.relop ty op n base then True else False)
1✔
443
  | op, Ptr { base; offset = { node = Val (Bitv _ as o); _ } }, Val (Bitv _ as n)
2✔
444
    ->
445
    let base = Eval.binop (Ty_bitv 32) Add (Bitv (Bitvector.of_int32 base)) o in
2✔
446
    value (if Eval.relop ty op base n then True else False)
1✔
447
  | op, List l1, List l2 -> relop_list op l1 l2
×
448
  | Gt, _, _ -> relop ty Lt hte2 hte1
×
449
  | GtU, _, _ -> relop ty LtU hte2 hte1
1✔
450
  | Ge, _, _ -> relop ty Le hte2 hte1
×
451
  | GeU, _, _ -> relop ty LeU hte2 hte1
1✔
452
  | _, _, _ -> raw_relop ty op hte1 hte2
2✔
453

454
and relop_list op l1 l2 =
455
  match (op, l1, l2) with
×
456
  | Eq, [], [] -> value True
×
457
  | Eq, _, [] | Eq, [], _ -> value False
×
458
  | Eq, l1, l2 ->
×
459
    if not (List.compare_lengths l1 l2 = 0) then value False
×
460
    else
461
      List.fold_left2
×
462
        (fun acc a b ->
463
          binop Ty_bool And acc
×
464
          @@
465
          match (ty a, ty b) with
×
466
          | Ty_real, Ty_real -> relop Ty_real Eq a b
×
467
          | _ -> relop Ty_bool Eq a b )
×
468
        (value True) l1 l2
×
469
  | Ne, _, _ -> unop Ty_bool Not @@ relop_list Eq l1 l2
×
470
  | (Lt | LtU | Gt | GtU | Le | LeU | Ge | GeU), _, _ -> assert false
471

472
let raw_cvtop ty op hte = make (Cvtop (ty, op, hte)) [@@inline]
3✔
473

474
let cvtop ty op hte =
475
  match (op, view hte) with
25✔
476
  | Ty.Cvtop.String_to_re, _ -> raw_cvtop ty op hte
×
477
  | _, Val v -> value (Eval.cvtop ty op v)
22✔
478
  | String_to_float, Cvtop (Ty_real, ToString, real) -> real
×
479
  | _ -> raw_cvtop ty op hte
3✔
480

481
let raw_naryop ty op es = make (Naryop (ty, op, es)) [@@inline]
×
482

483
let naryop ty op es =
484
  if List.for_all (fun e -> match view e with Val _ -> true | _ -> false) es
×
485
  then
486
    let vs =
7✔
487
      List.map (fun e -> match view e with Val v -> v | _ -> assert false) es
18✔
488
    in
489
    value (Eval.naryop ty op vs)
7✔
490
  else
491
    match (ty, op, List.map view es) with
×
492
    | ( Ty_str
×
493
      , Concat
494
      , [ Naryop (Ty_str, Concat, l1); Naryop (Ty_str, Concat, l2) ] ) ->
495
      raw_naryop Ty_str Concat (l1 @ l2)
496
    | Ty_str, Concat, [ Naryop (Ty_str, Concat, htes); hte ] ->
×
497
      raw_naryop Ty_str Concat (htes @ [ make hte ])
×
498
    | Ty_str, Concat, [ hte; Naryop (Ty_str, Concat, htes) ] ->
×
499
      raw_naryop Ty_str Concat (make hte :: htes)
×
500
    | _ -> raw_naryop ty op es
×
501

502
let[@inline] raw_extract (hte : t) ~(high : int) ~(low : int) : t =
503
  make (Extract (hte, high, low))
7✔
504

505
let extract (hte : t) ~(high : int) ~(low : int) : t =
506
  match (view hte, high, low) with
12✔
507
  | Val (Bitv bv), high, low ->
3✔
508
    let high = (high * 8) - 1 in
509
    let low = low * 8 in
510
    value (Bitv (Bitvector.extract bv ~high ~low))
3✔
511
  | ( Cvtop
2✔
512
        ( _
513
        , (Zero_extend 24 | Sign_extend 24)
1✔
514
        , ({ node = Symbol { ty = Ty_bitv 8; _ }; _ } as sym) )
515
    , 1
516
    , 0 ) ->
517
    sym
518
  | Concat (_, e), h, l when Ty.size (ty e) = h - l -> e
2✔
519
  | Concat (e, _), 8, 4 when Ty.size (ty e) = 4 -> e
×
520
  | _ ->
5✔
521
    if high - low = Ty.size (ty hte) then hte else raw_extract hte ~high ~low
×
522

523
let raw_concat (msb : t) (lsb : t) : t = make (Concat (msb, lsb)) [@@inline]
2✔
524

525
(* TODO: don't rebuild so many values it generates unecessary hc lookups *)
526
let rec concat (msb : t) (lsb : t) : t =
527
  match (view msb, view lsb) with
6✔
528
  | Val (Bitv a), Val (Bitv b) -> value (Bitv (Bitvector.concat a b))
1✔
529
  | Val (Bitv _), Concat (({ node = Val (Bitv _); _ } as b), se) ->
×
530
    raw_concat (concat msb b) se
×
531
  | Extract (s1, h, m1), Extract (s2, m2, l) when equal s1 s2 && m1 = m2 ->
3✔
532
    if h - l = Ty.size (ty s1) then s1 else raw_extract s1 ~high:h ~low:l
1✔
533
  | Extract (_, _, _), Concat (({ node = Extract (_, _, _); _ } as e2), e3) ->
×
534
    raw_concat (concat msb e2) e3
×
535
  | _ -> raw_concat msb lsb
2✔
536

537
let rec simplify_expr ?(in_relop = false) (hte : t) : t =
4✔
538
  match view hte with
16✔
539
  | Val _ | Symbol _ -> hte
4✔
540
  | Ptr { base; offset } ->
×
541
    let offset = simplify_expr ~in_relop offset in
542
    if not in_relop then ptr base offset
×
543
    else binop (Ty_bitv 32) Add (value (Bitv (Bitvector.of_int32 base))) offset
×
544
  | List es -> make @@ List (List.map (simplify_expr ~in_relop) es)
×
545
  | App (x, es) -> make @@ App (x, List.map (simplify_expr ~in_relop) es)
×
546
  | Unop (ty, op, e) ->
×
547
    let e = simplify_expr ~in_relop e in
548
    unop ty op e
×
549
  | Binop (ty, op, e1, e2) ->
6✔
550
    let e1 = simplify_expr ~in_relop e1 in
551
    let e2 = simplify_expr ~in_relop e2 in
6✔
552
    binop ty op e1 e2
6✔
553
  | Relop (ty, op, e1, e2) ->
×
554
    let e1 = simplify_expr ~in_relop:true e1 in
555
    let e2 = simplify_expr ~in_relop:true e2 in
×
556
    relop ty op e1 e2
×
557
  | Triop (ty, op, c, e1, e2) ->
×
558
    let c = simplify_expr ~in_relop c in
559
    let e1 = simplify_expr ~in_relop e1 in
×
560
    let e2 = simplify_expr ~in_relop e2 in
×
561
    triop ty op c e1 e2
×
562
  | Cvtop (ty, op, e) ->
×
563
    let e = simplify_expr ~in_relop e in
564
    cvtop ty op e
×
565
  | Naryop (ty, op, es) ->
×
566
    let es = List.map (simplify_expr ~in_relop) es in
567
    naryop ty op es
×
568
  | Extract (s, high, low) ->
×
569
    let s = simplify_expr ~in_relop s in
570
    extract s ~high ~low
×
571
  | Concat (e1, e2) ->
×
572
    let msb = simplify_expr ~in_relop e1 in
573
    let lsb = simplify_expr ~in_relop e2 in
×
574
    concat msb lsb
×
575
  | Binder _ ->
×
576
    (* Not simplifying anything atm *)
577
    hte
578

579
module Cache = Hashtbl.Make (struct
580
  type nonrec t = t
581

582
  let hash = hash
583

584
  let equal = equal
585
end)
586

587
let simplify =
588
  (* TODO: it may make sense to share the cache with simplify_expr ? *)
589
  let cache = Cache.create 512 in
590
  fun e ->
3✔
591
    match Cache.find_opt cache e with
2✔
592
    | Some simplified -> simplified
×
593
    | None ->
2✔
594
      let rec loop x =
595
        let x' = simplify_expr x in
4✔
596
        if equal x x' then begin
2✔
597
          Cache.add cache e x';
598
          x'
2✔
599
        end
600
        else loop x'
2✔
601
      in
602
      loop e
603

604
module Bool = struct
605
  open Ty
606

607
  let of_val = function
608
    | Val True -> Some true
×
609
    | Val False -> Some false
×
610
    | _ -> None
×
611

612
  let true_ = value True
3✔
613

614
  let false_ = value False
3✔
615

616
  let to_val b = if b then true_ else false_
×
617

618
  let v b = to_val b [@@inline]
×
619

620
  let not b =
621
    let bexpr = view b in
×
622
    match of_val bexpr with
×
623
    | Some b -> to_val (not b)
×
624
    | None -> (
×
625
      match bexpr with
626
      | Unop (Ty_bool, Not, cond) -> cond
×
627
      | _ -> unop Ty_bool Not b )
×
628

629
  let equal b1 b2 =
630
    match (view b1, view b2) with
×
631
    | Val True, Val True | Val False, Val False -> true_
×
632
    | _ -> relop Ty_bool Eq b1 b2
×
633

634
  let distinct b1 b2 =
635
    match (view b1, view b2) with
×
636
    | Val True, Val False | Val False, Val True -> true_
×
637
    | _ -> relop Ty_bool Ne b1 b2
×
638

639
  let and_ b1 b2 =
640
    match (of_val (view b1), of_val (view b2)) with
×
641
    | Some true, _ -> b2
×
642
    | _, Some true -> b1
×
643
    | Some false, _ | _, Some false -> false_
×
644
    | _ -> binop Ty_bool And b1 b2
×
645

646
  let or_ b1 b2 =
647
    match (of_val (view b1), of_val (view b2)) with
×
648
    | Some false, _ -> b2
×
649
    | _, Some false -> b1
×
650
    | Some true, _ | _, Some true -> true_
×
651
    | _ -> binop Ty_bool Or b1 b2
×
652

653
  let ite c r1 r2 = triop Ty_bool Ite c r1 r2
×
654
end
655

656
module Make (T : sig
657
  type elt
658

659
  val ty : Ty.t
660

661
  val value : elt -> Value.t
662
end) =
663
struct
664
  open Ty
665

666
  let v i = value (T.value i)
×
667

668
  let sym x = symbol Symbol.(x @: T.ty)
×
669

670
  let ( ~- ) e = unop T.ty Neg e
×
671

672
  let ( = ) e1 e2 = relop Ty_bool Eq e1 e2
×
673

674
  let ( != ) e1 e2 = relop Ty_bool Ne e1 e2
×
675

676
  let ( > ) e1 e2 = relop T.ty Gt e1 e2
×
677

678
  let ( >= ) e1 e2 = relop T.ty Ge e1 e2
×
679

680
  let ( < ) e1 e2 = relop T.ty Lt e1 e2
×
681

682
  let ( <= ) e1 e2 = relop T.ty Le e1 e2
×
683
end
684

685
module Bitv = struct
686
  open Ty
687

688
  module I8 = Make (struct
689
    type elt = int
690

691
    let ty = Ty_bitv 8
692

693
    let value i = Value.Bitv (Bitvector.of_int8 i)
×
694
  end)
695

696
  module I32 = Make (struct
697
    type elt = int32
698

699
    let ty = Ty_bitv 32
700

701
    let value i = Value.Bitv (Bitvector.of_int32 i)
×
702
  end)
703

704
  module I64 = Make (struct
705
    type elt = int64
706

707
    let ty = Ty_bitv 64
708

709
    let value i = Value.Bitv (Bitvector.of_int64 i)
×
710
  end)
711
end
712

713
module Fpa = struct
714
  open Ty
715

716
  module F32 = struct
717
    include Make (struct
718
      type elt = float
719

720
      let ty = Ty_fp 32
721

722
      let value f = Value.Num (F32 (Int32.bits_of_float f))
×
723
    end)
724

725
    (* Redeclare equality due to incorrect theory annotation *)
726
    let ( = ) e1 e2 = relop (Ty_fp 32) Eq e1 e2
×
727

728
    let ( != ) e1 e2 = relop (Ty_fp 32) Ne e1 e2
×
729
  end
730

731
  module F64 = struct
732
    include Make (struct
733
      type elt = float
734

735
      let ty = Ty_fp 64
736

737
      let value f = Value.Num (F64 (Int64.bits_of_float f))
×
738
    end)
739

740
    (* Redeclare equality due to incorrect theory annotation *)
741
    let ( = ) e1 e2 = relop (Ty_fp 64) Eq e1 e2
×
742

743
    let ( != ) e1 e2 = relop (Ty_fp 64) Ne e1 e2
×
744
  end
745
end
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc