mirrors/z3
3
0
Fork 0
mirror of https://github.com/Z3Prover/z3 synced 2025-04-24 01:25:31 +00:00
Code Activity

fix non-termination bug in elim-unconstrained, add parameter validation to fix #7432

Browse source
This commit is contained in:
Nikolaj Bjorner 2024-10-22 09:59:12 -07:00
parent d18831c8d5
commit 253f7d7675
3 changed files with 12 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

13
src/ast/simplifiers/elim_unconstrained.cpp
View file

@ -86,7 +86,7 @@ void elim_unconstrained::eliminate() {
continue;
}
if (m_heap.contains(root(e))) {
IF_VERBOSE(11, verbose_stream() << "already in heap " << mk_bounded_pp(e, m) << "\n");
TRACE("elim_unconstrained", tout << "already in heap " << mk_bounded_pp(e, m) << "\n");
continue;
}
app* t = to_app(e);
@ -111,9 +111,9 @@ void elim_unconstrained::eliminate() {
continue;
}
IF_VERBOSE(11, verbose_stream() << "replace " << mk_pp(t, m) << " : " << rr << " -> " << r << "\n");
IF_VERBOSE(11, verbose_stream() << "replace " << mk_pp(t, m) << " / " << rr << " -> " << r << "\n");
TRACE("elim_unconstrained", tout << mk_pp(t, m) << " : " << rr << " -> " << r << "\n");
TRACE("elim_unconstrained", tout << mk_pp(t, m) << " / " << rr << " -> " << r << "\n");
SASSERT(r->get_sort() == t->get_sort());
m_stats.m_num_eliminated++;
m_trail.push_back(r);
@ -147,10 +147,10 @@ expr* elim_unconstrained::get_parent(unsigned n) const {
}
void elim_unconstrained::invalidate_parents(expr* e) {
ptr_vector<expr> todo;
ptr_buffer<expr> todo;
do {
node& n = get_node(e);
if (!n.m_dirty) {
if (!n.m_dirty && e == n.m_term) {
n.m_dirty = true;
for (expr* e : n.m_parents)
todo.push_back(e);
@ -299,7 +299,7 @@ expr_ref elim_unconstrained::reconstruct_term(node& n0) {
return expr_ref(t, m);
if (!is_node(t))
return expr_ref(t, m);
ptr_vector<expr> todo;
ptr_buffer<expr> todo;
todo.push_back(t);
while (!todo.empty()) {
t = todo.back();
@ -310,6 +310,7 @@ expr_ref elim_unconstrained::reconstruct_term(node& n0) {
unsigned sz0 = todo.size();
if (is_app(t)) {
if (n.m_term != t) {
n.m_dirty = false;
todo.pop_back();
continue;
}