Skip to main content

Table 2 Comparison with symbolic execution

From: From proof-of-concept to exploitable

Name

Vul type

Revery Gen. Time (s)

Path reuse rate

Revery EXP. work

SYM. Gen. Time (s)

SYM. EXP. work

shop 2

UAF

238

100%

YES

Failed

NO

note2

BOF

70

100%

YES

Failed

NO

ezhp

BOF

56

98.0%

YES

Failed

NO

fb

BOF

60

85.1%

YES

Failed

NO

note3

BOF

83

84.1%

YES

Failed

NO

main

UAF

146

71.1%

YES

>4h

-

stkof

BOF

208

65.5%

YES

Failed

NO

marimo

BOF

264

62.2%

YES

Failed

NO

simplenote

BOF

263

41.9%

YES

Failed

NO

babyheap

UAF

442

27.8%

YES

Failed

NO

note1

BOF

161

84.0%

YES

412

YES

b00ks

BOF

81

83.3%

YES

91

YES

woO2

UAF

38

22.7%

YES

39

YES

woO2_fixed

UAF

38

22.7%

YES

38

YES