[klee-dev] Type of bugs that KLEE can find

[XIE Xuan]

Dear all,

I would like to ask what types of bugs can KLEE find?  I only find a simple introduction about the error KLEE report here: http://klee.github.io/tutorials/testing-regex/
Do you have detailed documentation?
What’s more, is KLEE able to discover memory leak, i.e. forget to free() after malloc()? From the introduction above, it seems that KLEE is not able to find it.

Thanks!
-------------- next part --------------
HTML attachment scrubbed and removed