-
I was reading a lecture slides about dynamic symbolic execution (consolic) where they mention that klee is a dynamic symbolic execution tool. i don't understand. klee is purely symbolic execution or i…
-
Hi all,
I'm having difficulty getting angr's simulation manager to execute code in manually loaded libraries. Specifically, I am concolically executing a binary which makes a call to the `memcmp` lib…
-
Hello,
I am running symbolic execution on an example and for some reason that I can't quite understand I get an ArithmeticException. My code looks like:
double test(double x,double y){
…
-
Hi, I am researching how to incorporate security into CI/CD pipelines for an audience of DevOps professionals. I am especially interested in talking to someone familiar with Hybrid fuzzing or symbolic…
-
Hello,
I cannot understand whether S2E still performs concolic testing after #235 was merged.
If this is the case, how can one specify the concrete seed for a symbolic value?
mpuzz updated
5 years ago
-
Hi,
I notice the usage tells to use the non-instrumented binary for qsym. I wonder if I can run it on the instrumented binary? if so, will it cause any problems? Thank you.
-
Z3 currently only supports a symbol based on int (32-bit). Given that concolic executions track expressions for memory, it would be nice to have a 64-bit symbol. This way the caller can use the memo…
wdcui updated
4 years ago
-
Hi,
I'm confused about how QSYM decide whether a ExprRef is concrete or not. Please have a look at loop.c, shouldn't the branch at line 25 is symbolic? //if ( c == '\n' ) {
However, the attache…
-
This is a proposal. Several reasons:
- I believe that newcomers don't necessarily know what concolic execution is.
- Concolic execution as implemented by S2E has nothing in common with how it's do…
-
This is a tracking issue for research work on concolic execution of evm.