A concolic testing tool for the Erlang functional programming language.
This is the source tree for CutEr, a concolic unit testing tool for Erlang.
CAUTION: This tool is still under heavy development
Copyright 2014-2020 by Aggelos Giantsios, Nikolaos Papaspyrou and Kostis Sagonas.
This program is distributed under the GPL, version 3 or later. Please see the COPYING file for details.
In order to use CutEr, you need the following programs:
Although CutEr may still be working with older Erlang/OTP releases, we only support Erlang/OTP releases 19.x or later. Note that using a pre-built package or binaries will not suffice if the library modules have not been compiled with debug information. In that case, you will need to build and install Erlang/OTP from source.
Download the latest source code distribution of Erlang/OTP or clone the Erlang/OTP github repository:
git clone https://github.com/erlang/otp.git
Then follow the instructions in INSTALL.md for building and installing Erlang/OTP.
Download and install the latest Python 3.x distribution.
Also, you need to install the required Python dependencies.
python3 -m pip install -r requirements.txt
Note that CutEr requires Python 3.6 or higher.
Download the v4.8.8 Z3 release or clone the
z3-4.8.8tag of Z3 from its git repository with the following command:
git clone -b z3-4.8.8 --depth 1 https://github.com/Z3Prover/z3.git
For your convenience, we include here a list of commands to build from source and install the above release of Z3:
cd z3 ; python scripts/mk_make.py cd build ; make sudo make install
If this sequence of commands does not work for you, follow the instructions in Z3's GitHub repository.
Note that CutEr does not work properly with the v4.8.7 release of Z3 due to e.g. this issue. It does, however, work well with many previous releases of Z3, for example v4.8.6.
If you have a Linux or an OSX system then you can skip this step and, after you have downloaded or cloned this repository, you can run the provided
fetch_protoc.shscript and follow the instructions.
If you are running on some other OS, download the 3.11.3 version of protoc for your OS and follow the instructions in readme.txt.
Download CutEr's sources or clone this repository:
git clone https://github.com/cuter-testing/cuter.git cd cuter
[Optional] If you want to run the full test suite of CutEr, you will also need PropEr. You can install it independently or go to CutEr's base directory and run:
git submodule init && git submodule update git submodule foreach make
[Optional] If you have not manually downloaded and installed the Protocol Buffer Compiler, run the following script that will fetch it:
Configure and compile CutEr. For a default build use:
autoconf ./configure # see Note below make depend make
[If required] Note that if you have installed protoc using
fetch_protoc.shthen you need to specify the path of protoc to the configure script using a command like the following:
[Optional] You can run the unit and functional tests with
[Optional] You can also run Dialyzer with
Add CutEr's base directory to your Erlang library path by updating the
ERL_LIBSenvironment variable. Just add
to your shell startup file (e.g.
Let's say that you have a simple module
foothat just contains the exported function
bar/2. The source file
-spec bar([number()], [number()]) -> number(). bar(, Ys) -> lists:sum(Ys); bar([X|Xs], [Y|Ys]) -> X * Y + bar(Xs, Ys).
For single file tests, such as the above, the simplest way to run CutEr is to use the
cuterscript as follows:
./cuter foo bar '[, ]'
i.e. supply it with three arguments: the module name, the function name, and the list of arguments for the call that will act as a seed for the concolic execution of the unit under test. If there is no
cuterscript will automatically compile the
foo.erlfile and create a .beam file with debug information.
Alternatively, go to the directory of the source file and compile it with debug information:
erlc +debug_info foo.erl
CutEr can then be invoked by calling the
erl -noshell -eval "cuter:run(foo, bar, [, ])" -s init stop
This will report a list of inputs that lead to runtime errors, for example
To sum up,
cuter:run/3is called as
cuter:run(M, F, As)where
Mis the module
Fis the function
Asis the list of arguments of the seed input
There is also a
cuter:run/4function that takes these three arguments but also a numeric argument
Depththat denotes the depth of the search (i.e. roughly the number of branches that will be explored). This depth can also be specified as an option of the
./cuter foo bar '[, ]' -d 42
CutEr provides more API functions that also come with options that control the concolic execution of Erlang programs. These will be explained in a set of forthcoming tutorials. In the meantime, you can find out about them by the command:
and by browsing the source code of CutEr.
Have fun with the tool!