Concolic execution
- Dominant language
- Haskell
- Stars
- 2.1k
- Forks
- 320
- PR merge metrics
- No merged PRs in 30d
Description
[Concolic Execution](https://en.wikipedia.org/wiki/Concolic_testing) is a mixed symbolic / concrete fuzzing approach where we would leverage the path conditions generated from a symbolic execution along a single (randomly selected) branch in the execution tree to synthesize an input that will visit a new branch.
We could add a concolic execution engine and combine it with the [`explore`](https://github.com/dapphub/dapptools/issues/644) test type to allow very high coverage testing against contracts that are not amenable to exhaustive symbolic exeuction (e.g. highly non linear, dynamic data).
If the solver is unable to synthesize a value that satisfies the given path conditions, we can fallback to fuzzing until we find a value that would explore the new branch.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.