Symbolic execution is an effective program analysis technique whose scalability largely
depends on the ability to quickly solve large numbers of first-order logic queries. We …

SMT solving is often a major source of cost in a broad range of techniques such as symbolic
program analysis. Thus, speeding up SMT solving is still an urgent requirement. A dominant …

Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

Many symbolic program analysis techniques rely on SMT solvers to verify properties of
programs. Despite the remarkable progress made in the development of such tools, SMT …

Symbolic execution is an effective technique for exploring paths in a program and reasoning
about all possible values on those paths. However, the technique still struggles with code …

This paper introduces a novel approach to scale symbolic execution---a program analysis
technique for systematic exploration of bounded execution paths---for test input generation …

Path explosion and constraint solving are two challenges to symbolic execution's scalability.
Symbolic execution explores the program's path space with a searching strategy and …

Symbolic execution is a powerful program analysis and testing technique. Symbolic
execution engines are usually implemented as interpreters, and the induced interpretation …

Symbolic execution is a powerful technique for systematically exploring the paths of a
program and generating the corresponding test inputs. However, its practical usage is often …

Array constraints are prevalent in analyzing a program with symbolic execution. Solving
array constraints is challenging due to the complexity of the precise encoding for arrays. In …