dapphub / dapphub/dapptools

Concolic execution

Open
#646 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Haskell
Stars
2.1k
Forks
320
PR merge metrics
No merged PRs in 30d

Description

[Concolic Execution](https://en.wikipedia.org/wiki/Concolic_testing) is a mixed symbolic / concrete fuzzing approach where we would leverage the path conditions generated from a symbolic execution along a single (randomly selected) branch in the execution tree to synthesize an input that will visit a new branch.

We could add a concolic execution engine and combine it with the [`explore`](https://github.com/dapphub/dapptools/issues/644) test type to allow very high coverage testing against contracts that are not amenable to exhaustive symbolic exeuction (e.g. highly non linear, dynamic data).

If the solver is unable to synthesize a value that satisfies the given path conditions, we can fallback to fuzzing until we find a value that would explore the new branch.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.