Canalyze: a static bug-finding tool for C programs
Zhenbo Xu, Jian Zhang, Zhongxing Xu, Jiteng Wang · 2014
Symbolic analysis is a commonly used approach for static bug finding. It usually performs a precise path-by-path symbolic simulation from program inputs. A major challenge is its scalability and precision on interprocedural analysis. The former limits the application to large programs. The latter may lead to many false alarms.