You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It seem like the integer conversion for Symbol does not check that the integer is within the valid bounds that Z3_mk_int_symbol expects(0 <= 2^30 -1). If you try to create a symbol with u32::MAX for example then any of the functions that use a symbol via as_z3_symbol will be using a null pointer.
I'm not sure what bad things can happen because of this, I think some of the usual cases do get caught or just have other operations return null as well.
In doing some more digging, I see that Z3 tries to warn the user about this but in #92 we disabled the error handler and don't otherwise try to detect this situation.
It seem like the integer conversion for Symbol does not check that the integer is within the valid bounds that
Z3_mk_int_symbol
expects(0 <= 2^30 -1). If you try to create a symbol withu32::MAX
for example then any of the functions that use a symbol viaas_z3_symbol
will be using a null pointer.I'm not sure what bad things can happen because of this, I think some of the usual cases do get caught or just have other operations return null as well.
The text was updated successfully, but these errors were encountered: