a9363daf93
The first phase walks outwards towards __CPROVER__start, visiting all callers but recording callsites seen en route, then the second phase walks into callees not seen in the first phase, restricting the search to known reachable functions. This fixes the previous algorithm, which attempted the same logic but could visit too few functions when a particular functions was encountered as a callee before later being seen as a caller -- the latter results in more code being visited because the calling context is unknown, and so must be done first. |
||
|---|---|---|
| .. | ||
| main.c | ||
| test.desc | ||