avoid-arithmetic-constraints
Use when code performs arithmetic operations on symbolic input values
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
القائمة
Use when code performs arithmetic operations on symbolic input values
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when printf statements output strings without trailing newlines
Use when array is accessed with direct user input as index (0-based indexing)
Use when the program accesses a precomputed table using an offset (e.g., arr[n-1]) that introduces an arithmetic operation between the symbolic input and the index
Use when loop variables iterate over character values (e.g., ASCII codes) to represent different operations or choices
Use when code uses a loop to search for an input value in an array and then uses the found index for further computation
Use when code reads a fixed number of characters into an array and only accesses individual elements
| name | avoid-arithmetic-constraints |
| description | Use when code performs arithmetic operations on symbolic input values |
A KLEE-coverage code transformation. Applying it rewrites C source so symbolic execution explores more of the program's behavior.
When code performs arithmetic operations on symbolic input values
Replace arithmetic computations with direct conditional checks or constant outputs based on specific input values
Arithmetic operations create complex symbolic expressions that are harder for KLEE to solve, while simple equality checks and constant outputs create simpler path conditions
Before:
#include<stdio.h>
int x;
int main()
{
scanf("%d", &x);
printf("%d", (x-1)*(x-1));
}
After:
#include<stdio.h>
int main(){puts(getchar()-48?"0":"1");}
3ae6f9da