[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[csmith-dev] feature request: generate memory unsafe code



This is a feature request I received, and also it's something I've
wanted myself.

The new feature is for Csmith to optionally ignore its safety analyses sometimes, in order to generate memory unsafety. Obviously these features are turned off by default. Probably there are three flags:

- probability of ignoring possibly-null pointer when generating a dereference

- probability of ignoring possibly-expired pointer when generating a dereference

- probability of letting an array index go OOB

The purpose of these features is to test static and dynamic memory safety checking tools.

John