Profiling symbolic execution by measuring the symbolic heap and the symbolic execution graph to ensure solver-aided tools are performant: https://2018.splashcon.org/event/splash-2018-oopsla-finding-code-that-explodes-under-symbolic-evaluation
(Part of the remarkable Rosette project.)
miniblog.
Related Posts
It's weird how even pure languages tend to treat the Unix execution model as ambient state.
Are there any PLs that define a main function like this?
fn main(args, stdin, stdout, env) -> exit code
YAML is a funny language: it's not Turing complete, but it can have arbitrary code execution bugs.
Computing AMD-specific instructions on Intel by just brute-forcing the whole execution space and seeing which values differ: