菜单
Use when code uses explicit if-else statements to handle different input cases
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when printf statements output strings without trailing newlines
Use when array is accessed with direct user input as index (0-based indexing)
Use when the program accesses a precomputed table using an offset (e.g., arr[n-1]) that introduces an arithmetic operation between the symbolic input and the index
Use when loop variables iterate over character values (e.g., ASCII codes) to represent different operations or choices
Use when code uses a loop to search for an input value in an array and then uses the found index for further computation
Use when code reads a fixed number of characters into an array and only accesses individual elements
| name | avoid-explicit-branching |
| description | Use when code uses explicit if-else statements to handle different input cases |
A KLEE-coverage code transformation. Applying it rewrites C source so symbolic execution explores more of the program's behavior.
When code uses explicit if-else statements to handle different input cases
Replace conditional branches with arithmetic/logical expressions that compute the result directly
Eliminating explicit branches reduces the number of path constraints KLEE must solve, allowing it to explore the behavior space more efficiently through simpler symbolic expressions
Before:
#include<stdio.h>
int main()
{
int n;
scanf("%d", &n);
if(n == 1) printf("0\n");
else printf("1\n");
}
After:
#include<stdio.h>
int main(){puts(getchar()-48?"0":"1");}
36264af3