[klee-dev] Bugs found by KLEE (or symbolic execution in general)

Cristian Cadar c.cadar at imperial.ac.uk
Tue Dec 6 17:03:07 GMT 2016


Hi, a good reference is the (incomplete) list of publications that use 
or extend KLEE, available at:
http://klee.github.io/publications/

It would be great if there were volunteers interested in expanding this 
rather incomplete list by submitting patches at 
https://github.com/klee/klee.github.io

Best,
Cristian

On 04/12/16 22:56, Sean Heelan wrote:
> Hi all,
>
> I'm investigating the impact of some modifications to KLEE and would
> like to tell whether or not those modifications negatively impact KLEEs
> bug finding ability on real world code. Is there a list somewhere of
> bugs that have either been found by KLEE, or that could have been found
> by KLEE? I can of course use the issues in coreutils and busybox from
> the OSDI 2008 paper, but more targets would also be great.
>
> Failing a list, and KLEE-specific results, if anyone on the list has
> bugs they've managed to find (or refind) with KLEE or any sym. exec.
> tool that would also be very useful!
>
> Cheers,
> Sean
>
>
> _______________________________________________
> klee-dev mailing list
> klee-dev at imperial.ac.uk
> https://mailman.ic.ac.uk/mailman/listinfo/klee-dev
>



More information about the klee-dev mailing list