This paper uses a variant, under-constrained symbolic execution, that improves scalability by directly checking individual functions, rather than whole programs. We present UC-KLEE, a novel, scalable framework for checking C/C++ systems code, along with two use cases. First, we use UC-KLEE to ...
Engler. Under-constrained symbolic execution: Correctness checking for real code. In Proceedings of the USENIX Security Symposium, 2015.D. Ramos and D. Engler. Under-constrained symbolic execution: cor- rectness checking for real code. In USENIX Security Symposium, 2015....