execution trace on Clang AST

Hi list,

I am wondering if there is any method to extract execution traces or path conditions in Clang AST level. I want to run a binary with an input and observe which AST nodes are visited during the execution. I tried Sanitizer Coverage tool but it is quite hard to match LLVM bitcode and source code.

It would be appreciated if you could give some idea.

Thanks,
Kihong

Hi Kihong:

I haven’t used it yet, but have a look at https://llvm.org/docs/XRay.html and see if that helps…

hth…
don