|
|
|
|
|
|
by PeCaN
2164 days ago
|
|
|
It's actually the exact opposite of fuzzing; with symbolic execution you aim to prove, symbolically, that all possible code paths have some desired behavior (e.g. not crashing,). With fuzzing you just try code paths (guided) randomly and see if any of them crash. |
|
|