An Alarm Classification Using Shovel

'_prologue_' is an imaginary function that initialize argc, argv

Solid arrow means call edge

Dotted arrow means return edge

Green arrow means branch (pair of call & return)
For details, see II-A.'Backbone-Branch Decomposition' section of our paper

erl_call_alarm1_1

path 1

(User Feedback)

Path should NOT include a call edge from 'print_term' to 'xprintf' in backbone, because there is a string sanitization in the latter node

path 2

(User Feedback)

Path should NOT have an incoming edge to 'xprintf', because there is a string sanitization in the node

UNSAT (false alarm)

erl_call_alarm1_2

path 1

(User Feedback)

Path should NOT include a call edge from 'print_term' to 'xprintf' in backbone, because there is a string sanitization in the latter node

path 2

(User Feedback)

Path should NOT have an incoming edge to 'xprintf', because there is a string sanitization in the node

UNSAT (false alarm)

erl_call_alarm1_3

path 1

(User Feedback)

Path should NOT include a call edge from 'print_term' to 'xprintf' in backbone, because there is a string sanitization in the latter node

path 2

(User Feedback)

Path should NOT have an incoming edge to 'xprintf', because there is a string sanitization in the node

UNSAT (false alarm)