Multiply for alloca & malloca instructions may need to coerce index e…

…xpression

to target pointer width.


git-svn-id: http://llvm.org/svn/llvm-project/klee/trunk@77428 91177308-0d34-0410-b5e6-96231b3b80d8

lib/Core/Executor.cpp

@@ -1777,9 +1777,9 @@ void Executor::executeInstruction(ExecutionState &state, KInstruction *ki) {
       kmodule->targetData->getTypeStoreSize(ai->getAllocatedType());
     ref<Expr> size = Expr::createPointer(elementSize);
     if (ai->isArrayAllocation()) {
-      // XXX coerce?
       ref<Expr> count = eval(ki, 0, state).value;
-      size = MulExpr::create(count, size);
+      count = Expr::createCoerceToPointerType(count);
+      size = MulExpr::create(size, count);
     }
     bool isLocal = i->getOpcode()==Instruction::Alloca;
     executeAlloc(state, size, isLocal, ki);