Kani will find 1023 unless you constrain the input. The link you posted is saying a property test is unlikely to find it but Kani will find it.
Yeah you misread that. Read it again, it's saying normal fuzzing is unlikely to find it but Kani finds it instantly.
Re:CBMC: C bounded model checker (2021)
by PartiallyTyped on Saturday May 04, 2024 @03:28PM
(#40259732)
Oh this is embarrassing.
Seems like I misread the documentation...
~~What I was implying is that Kani just can't figure out all of the paths;~~ ~~Consider this example from Kani documentation [1]:~~
~~Kani is very unlikely to find x=1023.~~https://model-checking.github.io/kani/tutorial-first-steps.h...