1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
(* SPDX-License-Identifier: AGPL-3.0-or-later *)
(* Copyright © 2021-2024 OCamlPro *)
(* Written by the Owi programmers *)
open Bos
open Syntax
module Expr = Smtml.Expr
module Choice = Symbolic_choice_with_memory
type fail_mode =
| Trap_only
| Assertion_only
| Both
(* TODO: add a flag for this *)
let print_paths = false
let link_symbolic_modules link_state =
let func_typ = Symbolic.Extern_func.extern_type in
let link_state =
Link.extern_module' link_state ~name:"symbolic" ~func_typ
Symbolic_wasm_ffi.symbolic_extern_module
in
Link.extern_module' link_state ~name:"summaries" ~func_typ
Symbolic_wasm_ffi.summaries_extern_module
let run_file ~entry_point ~unsafe ~rac ~srac ~optimize ~invoke_with_symbols _pc
filename =
let* m = Compile.File.until_binary_validate ~unsafe ~rac ~srac filename in
let* m = Cmd_utils.set_entry_point entry_point invoke_with_symbols m in
let link_state = link_symbolic_modules Link.empty_state in
let+ m, link_state =
Compile.Binary.until_link ~unsafe ~optimize ~name:None link_state m
in
let m = Symbolic.convert_module_to_run m in
Interpret.Symbolic.modul link_state.envs m
let print_bug ~model_format ~labels ~model_out_file ~id ~no_value
~no_stop_at_failure ~no_assert_failure_expression_printing ~breadcrumbs
~with_breadcrumbs =
let to_string model labels =
match model_format with
| Cmd_utils.Json ->
let json = Smtml.Model.to_json model in
let labels_json =
`List
(List.map
(fun (id, name) ->
`Assoc [ ("id", `Int id); ("name", `String name) ] )
labels )
in
let json =
match json with
| `Assoc fields -> `Assoc (("labels", labels_json) :: fields)
| _ -> json
in
Yojson.to_string json
| Scfg ->
let scfg = Smtml.Model.to_scfg ~no_value model in
let model = Scfg.Query.get_dir_exn "model" scfg in
let lbls =
List.map
(fun (id, lbl_name) ->
{ Scfg.Types.name = "label"
; params = [ string_of_int id; lbl_name ]
; children = []
} )
labels
in
let children =
if with_breadcrumbs then
let bcrumbs =
[ { Scfg.Types.name = "breadcrumbs"
; params =
List.map (fun i -> Fmt.str "%ld" i) (List.rev breadcrumbs)
; children = []
}
]
in
model.children @ lbls @ bcrumbs
else model.children @ lbls
in
Fmt.str "%a" Scfg.Pp.directive { model with children }
in
let to_file path model =
let path =
if no_stop_at_failure then Fpath.(path + "_" + string_of_int id) else path
in
Bos.OS.File.write path (to_string model labels)
in
function
| `ETrap (tr, model, _, _) -> (
Fmt.pr "Trap: %s@\n" (Result.err_to_string tr);
match model_out_file with
| Some path -> to_file path model
| None -> Ok (Fmt.pr "%s@\n" (to_string model labels)) )
| `EAssert (assertion, model, _, _) -> (
if no_assert_failure_expression_printing then begin
Fmt.pr "Assert failure@\n"
end
else begin
Fmt.pr "Assert failure: %a@\n" Expr.pp assertion
end;
match model_out_file with
| Some path -> to_file path model
| None -> Ok (Fmt.pr "%s@\n" (to_string model labels)) )
let print_and_count_failures ~model_format ~model_out_file ~no_value
~no_assert_failure_expression_printing ~workspace ~no_stop_at_failure
~count_acc ~results ~with_breadcrumbs =
let test_suite_dir = Fpath.(workspace / "test-suite") in
let* (_created : bool) =
if not no_value then OS.Dir.create test_suite_dir else Ok false
in
let rec aux count_acc results =
match results () with
| Seq.Nil -> Ok count_acc
| Seq.Cons ((result, _thread), tl) ->
let* model =
match result with
| ( `EAssert (_, model, labels, breadcrumbs)
| `ETrap (_, model, labels, breadcrumbs) ) as bug ->
let* () =
print_bug ~model_format ~labels ~model_out_file ~id:count_acc
~no_value ~no_stop_at_failure ~breadcrumbs
~no_assert_failure_expression_printing ~with_breadcrumbs bug
in
Ok model
| `Error e -> Error e
in
let count_acc = succ count_acc in
let* () =
if not no_value then
let testcase = Smtml.Model.get_bindings model |> List.map snd in
Cmd_utils.write_testcase ~dir:test_suite_dir testcase
else Ok ()
in
if no_stop_at_failure then aux count_acc tl else Ok count_acc
in
aux count_acc results
let sort_results deterministic_result_order results =
if deterministic_result_order then
results
|> Seq.map (function (_, thread) as x ->
(x, List.rev @@ Thread_with_memory.breadcrumbs thread) )
|> List.of_seq
|> List.sort (fun (_, bc1) (_, bc2) ->
List.compare Prelude.Int32.compare bc1 bc2 )
|> List.to_seq |> Seq.map fst
else results
let handle_result ~workers ~no_stop_at_failure ~no_value
~no_assert_failure_expression_printing ~deterministic_result_order ~fail_mode
~workspace ~solver ~model_format ~model_out_file ~with_breadcrumbs
(result : unit Symbolic.Choice.t) =
let thread = Thread_with_memory.init () in
let res_queue = Wq.make () in
let path_count = Atomic.make 0 in
let callback v =
let open Symbolic_choice_intf in
Atomic.incr path_count;
match (fail_mode, v) with
| _, (EVal (), _) -> ()
| (Both | Trap_only), (ETrap (t, m, labels, breadcrumbs), thread) ->
Wq.push (`ETrap (t, m, labels, breadcrumbs), thread) res_queue
| (Both | Assertion_only), (EAssert (e, m, labels, breadcrumbs), thread) ->
Wq.push (`EAssert (e, m, labels, breadcrumbs), thread) res_queue
| (Trap_only | Assertion_only), _ -> ()
in
let join_handles =
Symbolic_choice_with_memory.run ~workers solver result thread ~callback
~callback_init:(fun () -> Wq.make_pledge res_queue)
~callback_end:(fun () -> Wq.end_pledge res_queue)
in
let results =
Wq.read_as_seq res_queue ~finalizer:(fun () ->
Array.iter Domain.join join_handles )
in
let results = sort_results deterministic_result_order results in
let* count =
print_and_count_failures ~model_format ~model_out_file ~no_value
~no_assert_failure_expression_printing ~workspace ~no_stop_at_failure
~count_acc:0 ~results ~with_breadcrumbs
in
if print_paths then Fmt.pr "Completed paths: %d@." (Atomic.get path_count);
let+ () = if count > 0 then Error (`Found_bug count) else Ok () in
Fmt.pr "All OK@."
(* NB: This function propagates potential errors (Result.err) occurring
during evaluation (OS, syntax error, etc.), except for Trap and Assert,
which are handled here. Most of the computations are done in the Result
monad, hence the let*. *)
let cmd ~profiling ~debug ~unsafe ~rac ~srac ~optimize ~workers
~no_stop_at_failure ~no_value ~no_assert_failure_expression_printing
~deterministic_result_order ~fail_mode ~workspace ~solver ~files ~profile
~model_format ~entry_point ~invoke_with_symbols ~model_out_file
~with_breadcrumbs =
let* workspace =
match workspace with
| Some path -> Ok path
| None -> OS.Dir.tmp "owi_sym_%s"
in
Option.iter Stats.init_logger_to_file profile;
if profiling then Log.profiling_on := true;
if debug then Log.debug_on := true;
(* deterministic_result_order implies no_stop_at_failure *)
let no_stop_at_failure = deterministic_result_order || no_stop_at_failure in
let pc = Choice.return () in
let* result : unit Symbolic.Choice.t =
list_fold_left
(run_file ~entry_point ~unsafe ~rac ~srac ~optimize ~invoke_with_symbols)
pc files
in
handle_result ~fail_mode ~workers ~solver ~deterministic_result_order
~model_format ~no_value ~no_assert_failure_expression_printing ~workspace
~no_stop_at_failure ~model_out_file ~with_breadcrumbs result