Post #1689803
2026-03-23 16:06 UTC
@pixx This sounds like symbolic execution to me! I've not used this technique myself, but I had some colleagues who wrote their own symbolic execution analysis tools (I don't think they ever released them).
This seems like a promising list: https://github.com/ksluckow/awesome-symbolic-execution
Wikipedia: https://en.wikipedia.org/wiki/Symbolic_execution
Replies (1)
-
@lykso@tiny.tilde.website 2026-03-23 16:13
@pixx It looked like really useful stuff, though. The symbolic execution engine would crunch the code for a bit, then spit out a webpage with the code all laid out with each variable given a dropdown with all its possible value ranges. You could filter the source code to see what *could* execute if the variable were in one range or another, or step through the code until you hit another branching condition on an as-of-yet-unconstrained variable.