Strong Optimistic Solving for Dynamic Symbolic Execution. (arXiv:2209.03710v1 [cs.CR])

Dynamic symbolic execution (DSE) is an effective method for automated program
testing and bug detection. It is increasing the code coverage by the complex
branches exploration during hybrid fuzzing. DSE tools invert the branches along
some execution path and help fuzzer examine previously unavailable program
parts. DSE often faces over- and underconstraint problems. The first one leads
to significant analysis complication while the second one causes inaccurate
symbolic execution.

We propose strong optimistic solving method that eliminates irrelevant path
predicate …

dynamic symbolic execution