# 使用 Homebrew, Nix 安装 klee

查看 klee 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:klee
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install klee
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#klee
```

  证据: nixpkgs package indexes: pkgs/by-name/kl/klee/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:klee
- **软件包管理器:** Homebrew
- **版本:** 3.2
- **来源摘要:** Symbolic Execution Engine
- **主页:** <https://klee-se.org>
- **仓库:** <https://github.com/klee/klee>
- **最后更新:** 2026-07-31T14:27:43Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- kleaver (别名)
- klee (别名)
- klee-exec-tree (别名)
- klee-replay (别名)
- klee-stats (别名)
- klee-zesti (别名)
- ktest-gen (别名)
- ktest-randgen (别名)
- ktest-tool (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 3.2
## 项目历史与用法

KLEE is a dynamic symbolic execution engine for LLVM bitcode. It became influential because the 2008 OSDI paper demonstrated automatic test generation and bug finding on real Unix software at a scale that made symbolic execution feel practical rather than purely academic.

### 项目历史

KLEE was initially developed at Stanford by Cristian Cadar, Daniel Dunbar, and Dawson Engler and presented at OSDI 2008. The project site describes it as a symbolic execution engine built on LLVM, and the repository describes the two central pieces: the core symbolic virtual machine and a POSIX/Linux emulation layer for running bitcode programs with symbolic operating-system inputs.

The OSDI evaluation is the historical anchor for KLEE: it ran on GNU Coreutils, BusyBox, MINIX utilities, and the HiStar kernel, using generated tests to expose crashes and correctness problems in heavily used systems code. That paper established the shape of KLEE's long-term identity: a research tool that is still packaged as a practical command-line engine.

### 采用历史

KLEE has been adopted most visibly in research, program-analysis teaching, and systems-testing workflows. A 2020 journal article describes KLEE as a popular dynamic symbolic execution engine that began at Stanford and was later primarily developed and maintained by the Software Reliability Group at Imperial College London.

Package-manager adoption followed from that academic and systems-tooling footprint. The Homebrew formula ships the `klee`, `kleaver`, `ktest-tool`, replay, stats, and test-generation utilities, reflecting KLEE's role as a suite rather than a single binary.

### 使用方式

Users compile C or C++ programs to LLVM bitcode, mark inputs symbolic, and run KLEE to explore feasible paths and emit concrete test cases. The POSIX runtime lets KLEE model command-line arguments, files, environment variables, and other parts of a Unix process environment, making it especially attractive for testing command-line utilities.

### 为什么软件包爱好者会关心

KLEE matters to package nerds because it turns the package archive itself into test material: Coreutils, BusyBox, and MINIX utilities were not toy examples but ordinary low-level programs. It is also a good example of why some research artifacts become durable packages: the build may be specialized, but the command-line behavior is useful enough for distributions to preserve.

### 时间线

- 2008: OSDI paper presented KLEE as a symbolic execution tool for high-coverage tests on complex systems programs.
- 2008: The OSDI evaluation reported KLEE runs over more than 452 programs and serious bugs in Coreutils, BusyBox, MINIX, and HiStar.
- 2020: A journal article described KLEE's post-Stanford maintenance and its academic and industry community.
- 2025-12-23: GitHub releases page listed KLEE 3.2.

### Related projects

- KLEE is related to LLVM, STP and other SMT-backed solver tooling, S2E, angr, CBMC, AFL-style testing workflows, and the POSIX utility suites used in its original evaluation.

### 来源

- <https://github.com/klee/klee>
- <https://klee-se.org/>
- <https://link.springer.com/article/10.1007/s10009-020-00570-3>
- <https://www.usenix.org/event/osdi08/tech/full_papers/cadar/cadar.pdf>


## 安全说明

generalized runtime or code generation signal.

- **Geiger 风险:** yellow / 中
- generalized runtime or code generation signal

## 其他软件包管理器记录

- Nix - klee: normalized package name match | nixpkgs package indexes: pkgs/by-name/kl/klee/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/klee.yml](https://github.com/mxcl/pkgdb/blob/main/combined/klee.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
