Talk:EXE: Automatically Generating Inputs of Death

From GradTurkey

[edit] Library calls?

One thing the paper doesn't address is how library calls are handled when they operate on symbolic expressions. For instance, can the system detect when a read() into an array might write data past the end of the array? It seems like they wouldn't be able to do this without source for the library, but system calls would still pose a problem since memory access happens inside the kernel.

--BoAdler 00:52, 16 March 2007 (PDT)