EXE: A system for automatically generating inputs of death using symbolic execution
Cristian Cadar, Vijay S Ganesh, Peter M. Pawlowski, David L. Dill, Dawson Engler · 2006
Systems code defines an error-prone execution state space built from deeply nested conditionals and function call chains, massive amounts of code, and enthusiastic use of casting and pointer operations.