Loop path reduction by state pruning

Abstract

Path explosion has been a problem for symbolic execution for a long time. The key to avoid path explosion is to limit the number of paths generated within loops while maintaining high code coverage. Full symbolic execution creates paths for every possible execution path. Frequently, paths within loops do not contribute to code coverage. Branches within loops may generate new states at every iteration. The path explosion problem created by loops often stops symbolic execution to reach deeper parts of the code.

BibTeX

@inproceedings{Gao-Lumetta:ASE18,
  author    = {Jianxiong Gao and
               Steven S. Lumetta},
  title     = {Loop path reduction by state pruning},
  booktitle = {ASE},
  pages     = {838--843},
  publisher = {{ACM}},
  year      = {2018},
}

Loop path reduction by state pruning

Abstract

Related papers