Skip to content

Value-set dereference: use cond_exprt to avoid quadratic guards #4555

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

7 changes: 7 additions & 0 deletions src/goto-symex/goto_symex.h
Original file line number Diff line number Diff line change
Expand Up @@ -534,6 +534,13 @@ class goto_symext
const exprt &rhs,
exprt::operandst &,
assignment_typet);
void symex_assign_cond(
statet &,
const cond_exprt &lhs,
const exprt &full_lhs,
const exprt &rhs,
exprt::operandst &,
assignment_typet);
void symex_assign_byte_extract(
statet &,
const byte_extract_exprt &lhs,
Expand Down
41 changes: 41 additions & 0 deletions src/goto-symex/symex_assign.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -155,6 +155,9 @@ void goto_symext::symex_assign_rec(
else if(lhs.id()==ID_if)
symex_assign_if(
state, to_if_expr(lhs), full_lhs, rhs, guard, assignment_type);
else if(lhs.id() == ID_cond)
symex_assign_cond(
state, to_cond_expr(lhs), full_lhs, rhs, guard, assignment_type);
else if(lhs.id()==ID_typecast)
symex_assign_typecast(
state, to_typecast_expr(lhs), full_lhs, rhs, guard, assignment_type);
Expand Down Expand Up @@ -613,6 +616,44 @@ void goto_symext::symex_assign_if(
}
}

void goto_symext::symex_assign_cond(
statet &state,
const cond_exprt &lhs,
const exprt &full_lhs,
const exprt &rhs,
exprt::operandst &guard,
assignment_typet assignment_type)
{
std::size_t old_guard_size = guard.size();

for(std::size_t i = 0; i < lhs.get_n_cases(); ++i)
{
exprt renamed_guard = state.rename(lhs.condition(i), ns).get();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 It's confusing that the variable names don't distinguish between the incoming guard and the extra bit coming from the current case we're considering. Maybe renamed_case_guard?

do_simplify(renamed_guard);
if(!renamed_guard.is_false())
{
guard.push_back(renamed_guard);
symex_assign_rec(
state, lhs.value(i), full_lhs, rhs, guard, assignment_type);
guard.pop_back();
}

// If this one is a certainty the remaining cases are irrelevant:
if(renamed_guard.is_true())
break;

// If the conditions are non-exclusive, further cases can only happen if
// this one did not. If they are exclusive then they can be tested
// independently.
if(!lhs.is_exclusive())
guard.push_back(not_exprt(renamed_guard));
}

// Restore the guard to its state before entering this function:
INVARIANT(guard.size() >= old_guard_size, "must not shrink the guard!");
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

s/shrink/grow/?

guard.resize(old_guard_size);
}

void goto_symext::symex_assign_byte_extract(
statet &state,
const byte_extract_exprt &lhs,
Expand Down