An Efficient Black-Box Support of Advanced Coverage Criteria for Klee

Nicolas Berthier, Steven De Oliveira, Nikolai Kosmatov +2

Dynamic symbolic execution (DSE) is a powerful test generation approach based on an exploration of the path space of the program under test. Well-adapted for path coverage, this ap…