[klee-dev] Target-Directed Symbolic Execution with KLEE

[Yannic Noller]

Hi all,

I would like to create all path conditions (or an under-approximation) that reach a certain source code line (something like "directed symbolic execution"). Is there an option in KLEE to do that? Or is there an extension of KLEE that can do that? 

Any help is very appreciated :)

Thanks,
Yannic
-------------- next part --------------
HTML attachment scrubbed and removed