Archer: using symbolic, pathsensitive analysis to detect memory access errors (2003)

by Y Xie, A Chou, D Engler
Venue:In Proc. of ACM ESEC/FSE-10