Skip to content

Segmentation fault with exists-quantified QF_FP formula involving uninterpreted function #8097

@wingsyuyi-satori

Description

@wingsyuyi-satori

z3 crashes with a segmentation fault on the following SMT-LIB input:

(set-logic QF_FP)
(declare-fun f (Float32 Float32 Float32) Float32)
(assert 
    (exists ((i Float32) (c Float32)) 
        (fp.eq c 
            (f i 
                (fp (_ bv0 1) (_ bv0 8) (_ bv0 23)) 
                (fp (_ bv0 1) (_ bv0 8) (_ bv0 23))))))
(check-sat)

Running z3 example.smt2 results in:

Segmentation fault (core dumped)

For reference, the issue was observed with the following version on Linux:

Z3 version 4.15.5 - 64 bit

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions