In computer science, symbolic execution (also symbolic evaluation or symbex) is a means of analyzing a program to determine what inputs cause each part of a program to execute. An interpreter follows the program, assuming symbolic values for inputs rather than obtaining actual inputs as normal execution of the program would. It thus arrives at expressions in terms of those symbols for expressions and variables in the program, and constraints in terms of those symbols for the possible outcomes of each conditional branch. Finally, the possible inputs that trigger a branch can be determined by solving the constraints.
The field of symbolic simulation applies the same concept to hardware. Symbolic computation applies the concept to the analysis of mathematical expressions.
and 23 Related for: Symbolic execution information
In computer science, symbolicexecution (also symbolic evaluation or symbex) is a means of analyzing a program to determine what inputs cause each part...
concrete and symbolic, also known as dynamic symbolicexecution) is a hybrid software verification technique that performs symbolicexecution, a classical...
verification, proving the correctness of programs, software testing based on symbolicexecution, and for synthesis, generating program fragments by searching over...
coverage to guide input generation. Dynamic symbolicexecution (also known as DSE or concolic execution) involves executing a test program on a concrete...
right. The SymbolicExecution Debugger visualizes the control flow of a program as a symbolicexecution tree that contains all feasible execution paths through...
of abstract symbols Symbolicexecution, the analysis of computer programs by tracking symbolic rather than actual values Symbolic link, a special type...
each path. Symbolicexecution can also be used to generate input for differential testing. The inherent limitation of symbolic-execution-assisted testing...
have finite state or may be reduced to finite state by abstraction; Symbolicexecution, as used to derive mathematical expressions representing the value...
related data structures, the model-checking method is symbolic. Historically, the first symbolic methods used BDDs. After the success of propositional...
solvers are built, which are used for problems such as job scheduling, symbolicexecution, program model checking, program verification based on hoare logic...
completeness of certain kinds of program analyses, including fuzzing, symbolicexecution, and path-sensitive static analysis. Path explosion refers to the...
invariants, and resource invariants for locks. It introduced a method of symbolicexecution, as well as an automatic way to infer frame axioms. Smallfoot included...
SAGE leverages symbolicexecution to systematically explore different paths in the program (a technique known as concolic execution). If the program's...
In mathematics and computer science, computer algebra, also called symbolic computation or algebraic computation, is a scientific area that refers to the...
this idea of symbolic simulation. Symbolic executionSymbolic computation Bryant, Randal E. (1990). "Symbolic simulation---techniques and applications"...
can be combined using the reduced product. Model checking Symbolic simulation Symbolicexecution List of tools for static code analysis — contains both...
Properties of an execution of a computer program—particularly for concurrent and distributed systems—have long been formulated by giving safety properties...
verification techniques including symbolicexecution. Current efforts in this direction include the Manticore symbolicexecution engine. WebAssembly System Interface...
symbolicexecution. In symbolicexecution programs are executed and monitored symbolically, that is, without concrete inputs. One symbolicexecution of...
predicate transformer semantics perform a kind of symbolicexecution of statements into predicates: execution runs backward in the case of weakest-preconditions...
and symbolicexecution -- i.e., an AFL-based fuzzer combined with the angr binary analysis framework, leveraging a QEMU-based emulation and execution-tracing...
carrying out the sentence is known as an execution. A prisoner who has been sentenced to death and awaits execution is condemned and is commonly referred...
information about which functions can be called at various points during the execution of a program. The collected information is represented by a control-flow...