Open gakonst opened 2 years ago
can get the best of both worlds with symbolic seed fuzzing:
Does anyone have good resources for building a performant symbolic execution engine? I am thinking of giving it a shot, but would like a better grasp of best practices + theory.
edit: The manticore paper is good and here's a good explanation of symbolic state merging.
let's suppose the SEVM is done, what solver shall we use to exhaust the symbolic states?
Motivation
Fuzzing is great but it does not cover all potential code paths, it just sprays and prays randomly right now
Solution
Create a Rust Symbolic EVM which we ideally implement the
Evm
trait for so that it can be used seamlessly inforge
.Other Context
Symbolic evms impls:
Blogs