Questions tagged [symbolic-execution]

36 questions
0
votes
1 answer

How do I debug missing variables from SMT-Lib output?

Based on this very helpful answer I rewrote my solver-for-a-stateful-program to use the Query monad and an ever-increasing list of SMT variables standing for the inputs. I expected one of two outcomes from this: either the first part (generating the…
Cactus
  • 27,075
  • 9
  • 69
  • 149
0
votes
1 answer

Modern symbolic execution techniques

What is the best technique of symbolic execution? Would you please help me to find pure symbolic execution and pure concolic testing tool (I mean, e.g. it is not including model checking,etc.) with its source?
any
  • 325
  • 5
  • 17
0
votes
1 answer

application of symbolic execution

What is the application of symbolic execution? Do symbolic execution only generate path condition? How can I use symbolic execution to verify contract?
any
  • 325
  • 5
  • 17
0
votes
1 answer

what is this sequence of chars in symbolic execution?

I am using Angr, a framework for symbolic execution. It only accepts 'read' function in C for getting input. It solves a program in C and converts its symbolic value to concrete value and I get this on its output: it is actually the value of…
0
votes
3 answers

tools for symbolic execution on binaries

are there any tools for symbolic execution on binaries. i mean using which, we do not require to modify the source code - like klee_make_symbolic or we can do such changes in IR (llvm ir etc.) thanks in advance
hilly
  • 57
  • 4
0
votes
1 answer

Symbolic Execution/Concolic Testing on OS Kernel

Is it possible to run Symbolic execution on Linux Kernel or parts of it? What about Concolic Testing? Thanks!
1 2
3