KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs

DMCA

KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs

Cached

Download Links

by Cristian Cadar , Daniel Dunbar , Dawson Engler

Citations:

557 - 15 self

BibTeX

@MISC{Cadar_klee:unassisted,
    author = {Cristian Cadar and Daniel Dunbar and Dawson Engler},
    title = {KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs},
    year = {}
}

OpenURL

Abstract

We present a new symbolic execution tool, KLEE, capable of automatically generating tests that achieve high coverage on a diverse set of complex and environmentally-intensive programs. We used KLEE to thoroughly check all 89 stand-alone programs in the GNU COREUTILS utility suite, which form the core user-level environment installed on millions of Unix systems, and arguably are the single most heavily tested set of open-source programs in existence. KLEE-generated tests achieve high line coverage — on average over 90% per tool (median: over 94%) — and significantly beat the coverage of the developers’ own hand-written test suite. When we did the same for 75 equivalent tools in the BUSYBOX embedded system suite, results were even better, including 100 % coverage on 31 of them. We also used KLEE as a bug finding tool, applying it to 452 applications (over 430K total lines of code), where it found 56 serious bugs, including three in COREUTILS that had been missed for over 15 years. Finally, we used KLEE to crosscheck purportedly identical BUSYBOX and COREUTILS utilities, finding functional correctness errors and a myriad of inconsistencies.

Keyphrases

high-coverage test automatic generation complex system program stand-alone program diverse set new symbolic execution tool environmentally-intensive program system suite identical busybox open-source program total line functional correctness error high coverage high line coverage core user-level environment equivalent tool unix system gnu coreutils utility suite serious bug hand-written test suite coreutils utility klee-generated test

DMCA