Skip to main content

Advertisement

Table 2 Comparison with symbolic execution

From: From proof-of-concept to exploitable

Name Vul type Revery Gen. Time (s) Path reuse rate Revery EXP. work SYM. Gen. Time (s) SYM. EXP. work
shop 2 UAF 238 100% YES Failed NO
note2 BOF 70 100% YES Failed NO
ezhp BOF 56 98.0% YES Failed NO
fb BOF 60 85.1% YES Failed NO
note3 BOF 83 84.1% YES Failed NO
main UAF 146 71.1% YES >4h -
stkof BOF 208 65.5% YES Failed NO
marimo BOF 264 62.2% YES Failed NO
simplenote BOF 263 41.9% YES Failed NO
babyheap UAF 442 27.8% YES Failed NO
note1 BOF 161 84.0% YES 412 YES
b00ks BOF 81 83.3% YES 91 YES
woO2 UAF 38 22.7% YES 39 YES
woO2_fixed UAF 38 22.7% YES 38 YES