Search 250 million research papers

Technical Perspective: Veritesting tackles path-explosion problem

Koushik Sen · Communications of the ACM · 2016

No abstract available.

Cited by 0

darkoss1/pysymex: v0.1.0a1 — Path Explosion Mitigation & Bug Fixes

Yassine Lahyani · Zenodo (CERN European Organization for Nuclear Research) · 2026

PySyMex v0.1.0a1 Second alpha release. Builds on v0.1.0a0 with major engine improvements for handling path-explosion on real-world codebases, 13 pre-existing bug fixes, and 140 additional tests. What's New Path Explosion Mitigation (CHTD) Constraint Hypergraph Treewidth Decomposition (core/treewidth.py) — reduces path exploration from O(2^B) to O(N·2^w) for bounded-treewidth programs KLEE-style constraint independence partitioning — 60–90% solver query reduction via per-cluster caching Adaptive Path Manager (Thompson Sampling) — Beta-Bernoulli bandit dynamically balances DFS, coverage-guided, and random exploration at runtime Theory-aware solver dispatch — auto-detects QF_LIA / QF_S / QF_BV / nonlinear theories and tunes Z3 parameters per query; auto-escalates to portfolio solver Exception forking — try/except branches now produce dual symbolic paths using Python 3.12+ exception table entries Branch affinity fast path — reduces treewidth by emitting single-sort Z3 expressions for known int/bool/float/str branches Bug Fixes (13) Infinite recursion in plugins/base.py enabled property _dispatch_call passing string instead of func_obj to _apply_model (root cause of SimpleNamespace test failures) Taint propagation missing from comparison operators (__lt__ / __le__ / etc.) SymbolicString missing with_taint(), length(), substring() methods SymbolicString.__add__ using wrong internal field names Off-by-one in resources.py check_all_limits LOAD_ATTR missing CowDict in isinstance check 6 further type/default/argument fixes across core/ and execution/ Tests 2723 passing (up from 2583), 0 failures

Cited by 0Open access

darkoss1/pysymex: v0.1.0a1 — Path Explosion Mitigation & Bug Fixes

Yassine Lahyani · Zenodo (CERN European Organization for Nuclear Research) · 2026

PySyMex v0.1.0a1 Second alpha release. Builds on v0.1.0a0 with major engine improvements for handling path-explosion on real-world codebases, 13 pre-existing bug fixes, and 140 additional tests. What's New Path Explosion Mitigation (CHTD) Constraint Hypergraph Treewidth Decomposition (core/treewidth.py) — reduces path exploration from O(2^B) to O(N·2^w) for bounded-treewidth programs KLEE-style constraint independence partitioning — 60–90% solver query reduction via per-cluster caching Adaptive Path Manager (Thompson Sampling) — Beta-Bernoulli bandit dynamically balances DFS, coverage-guided, and random exploration at runtime Theory-aware solver dispatch — auto-detects QF_LIA / QF_S / QF_BV / nonlinear theories and tunes Z3 parameters per query; auto-escalates to portfolio solver Exception forking — try/except branches now produce dual symbolic paths using Python 3.12+ exception table entries Branch affinity fast path — reduces treewidth by emitting single-sort Z3 expressions for known int/bool/float/str branches Bug Fixes (13) Infinite recursion in plugins/base.py enabled property _dispatch_call passing string instead of func_obj to _apply_model (root cause of SimpleNamespace test failures) Taint propagation missing from comparison operators (__lt__ / __le__ / etc.) SymbolicString missing with_taint(), length(), substring() methods SymbolicString.__add__ using wrong internal field names Off-by-one in resources.py check_all_limits LOAD_ATTR missing CowDict in isinstance check 6 further type/default/argument fixes across core/ and execution/ Tests 2723 passing (up from 2583), 0 failures

Cited by 0Open access

Analysis of an explosion protected cemented flame path

Björlin, Teodor, Qvarfordh, Hugo · Lund University Publications Student Papers (Lund University) · 2023

This report covers the master thesis that has been carried out at Axis EX, which focuses on explosion protected cameras.It is assumed that it is impossible to prevent flammable gasses from penetrating an explosion protected product.Therefore, an explosion can occur if an ignition source is present inside the product.The camera housings shall, in the event of an internal combustion of flammable gas, prevent the flames from spreading outside of the housings.To ensure that the examined camera fulfills the set requirements, mainly two standards are used; IEC 60079 and UL 1203.The purpose of this work was to analyze the installment of a glass window and its cemented flame path, to minimize potential issues noted in the production.During research it became clear that the sealant material used for the cemented flame path must undergo yearly testing.These tests can be avoided provided that the sealant material is classed according to TVLE2 by Underwriters Laboratories, who have issued the applied standard.The approach that was then followed was to partly examine TVLE2-classed materials, and partly analyze the production with the current material in order to contribute with improvement suggestions.Different methods and approaches were used for the two routes.For the selection of TVLE2-classed material, it was decided to combine the Double Diamond development methodology with Ulrich & Eppingers' general development methodology.The result of the material selection was that only two materials fulfilled the requirements; Peppers T1000 and KQS Celox.Due to uncontrollable circumstances they could not undergo testing within the scope of this work.Similar materials were however tested and it was concluded that new tools and fixtures would be needed for both materials.For the production analysis with the current material, a process-oriented FMEA was created.Fixtures and tools were constructed and tested iteratively with the FMEA acting as guidance.The team's contribution to the development process resulted in fixtures, tools and work instructions that led to the improvement of the defined objectives.

Cited by 0Open access

RWset: Attacking Path Explosion in Constraint-Based Test Generation

Peter Boonstoppel, Cristian Cadar, Dawson Engler · Lecture notes in computer science · 2008

Cited by 228Open access

RWset: Attacking path explosion in constraint-based test generation

Cristian Cadar, Dawson Engler · 2008

Abstract. Recent work has used variations of symbolic execution to automatically generate high-coverage test inputs [2, 8, 3, 12, 6]. Such tools have demonstrated their ability to find very subtle errors. However, one challenge they all face is how to effectively handle the exponential number of paths in the code. This paper presents a new technique for reducing the number of traversed code paths by discarding those that must have side-effects identical to some previously explored path. Our results on a mix of open source applications and device drivers show that this (sound) optimization reduces the numbers of paths traversed by several orders of magnitude, often getting coverage out of reach for a standard constraint-based execution system. 1

Cited by 0

darkoss1/pysymex: v0.1.0a1 — Path Explosion Mitigation & Bug Fixes 2

Yassine Lahyani · Zenodo (CERN European Organization for Nuclear Research) · 2026

PySyMex v0.1.0a1 Second alpha release. Builds on v0.1.0a0 with major engine improvements for handling path-explosion on real-world codebases, 13 pre-existing bug fixes, and 140 additional tests. What's New Path Explosion Mitigation (CHTD) Constraint Hypergraph Treewidth Decomposition (core/treewidth.py) — reduces path exploration from O(2^B) to O(N·2^w) for bounded-treewidth programs KLEE-style constraint independence partitioning — 60–90% solver query reduction via per-cluster caching Adaptive Path Manager (Thompson Sampling) — Beta-Bernoulli bandit dynamically balances DFS, coverage-guided, and random exploration at runtime Theory-aware solver dispatch — auto-detects QF_LIA / QF_S / QF_BV / nonlinear theories and tunes Z3 parameters per query; auto-escalates to portfolio solver Exception forking — try/except branches now produce dual symbolic paths using Python 3.12+ exception table entries Branch affinity fast path — reduces treewidth by emitting single-sort Z3 expressions for known int/bool/float/str branches Bug Fixes (13) Infinite recursion in plugins/base.py enabled property _dispatch_call passing string instead of func_obj to _apply_model (root cause of SimpleNamespace test failures) Taint propagation missing from comparison operators (__lt__ / __le__ / etc.) SymbolicString missing with_taint(), length(), substring() methods SymbolicString.__add__ using wrong internal field names Off-by-one in resources.py check_all_limits LOAD_ATTR missing CowDict in isinstance check 6 further type/default/argument fixes across core/ and execution/ Tests 2723 passing (up from 2583), 0 failures

Cited by 0Open access

New Approach to Path Explosion Problem of Symbolic Execution

Xu Xiao, Xiaosong Zhang, Xiongda Li · 2010

This paper is dedicated to the study of Symbolic Execution and improves the core algorithm of it using Heuristic learning, search and Function Abstraction to effectively address the path explosion problem, which will trigger the vulnerabilities that the traditional method can not find and improve the efficiency, precision and accuracy of software vulnerability discovery.

Cited by 10

Bug-Finding in Distributed Applications: Dealing with Exponential Path Explosion

2007

Recently dynamic testing schemes have been proposed to automatically find very subtle errors in program code. These tools exploit the program flow information contained in the program itself in order to generate high-coverage test cases. However when applying these techniques to find bugs in distributed systems new challenges arise. The non-deterministic scheduling of events in distributed systems introduces some serious scalability challenges, because of the exponentially growing search space. In this paper we will look into this problem and sketch possible solutions. 1

Cited by 0

Effects of the Johnston Island explosion on long‐path VLF transmissions

G.J. Burtt · New Zealand Journal of Geology and Geophysics · 1962

Abstract Observations on the transmissions of two very low frequency radio stations with very long paths across the Pacific Ocean showed considerable phase disturbance at the time of the explosion. The results were consistent with a rapid drop of the night‐time lower ionosphere from 85 km to about 68 km and a steady recovery over a period of about 4 hours.

Cited by 2Open access

Targeted Control-flow Transformations for Mitigating Path Explosion in Dynamic Symbolic Execution

Charitha Saumya, Rohan Gangaraju, Kirshanthan Sundararajah et al. · arXiv (Cornell University) · 2023

Dynamic symbolic execution (DSE) suffers from path explosion problem when the target program has many conditional branches. Classical approach for managing the path explosion problem is dynamic state merging. Dynamic state merging combines similar symbolic program states together to avoid the exponential growth of states in DSE. However, state merging still requires solver invocations at each branch point of the program even when both paths of the branch is feasible and, the best path search strategy for DSE may not create the best state merging opportunities. Some drawbacks of state merging can be mitigated by compile-time state merging i.e. branch elimination by converting control-flow into data-flow. In this paper, we propose a non-semantics preserving but failure-preserving compiler technique for removing expensive symbolic branches in a program to improve the scalability of DSE. We develop a framework for detecting spurious bugs that can be inserted by our transformation. Finally, we show that our transformation can significantly improve the performance of exhaustive DSE on variety of benchmarks and helps in achieving more coverage in a large real-world subjects within a limited time budget.

Cited by 0Open access

SymPcNSGA-Testing: A Hybrid Approach to Mitigate Path Explosion in Software Programs

Xaveria Djam Youh Kimbi, Sandra Maïla Modjeu Sipewa, Levinne Clemence Djeumeni Djombissie et al. · Journal of Software Engineering and Applications · 2026

The path explosion problem poses a significant barrier in the domain of software testing, making it nearly impossible to exhaustively explore all execution paths in large or complex software. Despite the extensive use of symbolic execution in the literature, the issue of path explosion remains largely unresolved. To address this limitation, we propose SymPcNSGA-Testing (Symbolic execution, Path Clustering, and Non-dominated Sorting Genetic Algorithm-II Testing), a hybrid methodology combining symbolic execution, path clustering, and multi-objective optimization using NSGA-II (Non-dominated Sorting Genetic Algorithm-II). Our approach aims to select a reduced yet representative set of execution paths that ensures maximum branch coverage while minimizing redundancy. SymPcNSGA-Testing operates in three stages: 1) symbolic execution with KLEE to explore the path space, 2) clustering of paths using the Ktest-cluster algorithm to group similar execution behaviors, and 3) multi-objective path optimization using NSGA-II, which selects representative paths that balance high branch coverage and minimal path set size. We evaluated our methodology on ten open-source programs from the Coreutils 9.5 package and compared it against several KLEE exploration strategies (DFS, BFS, NURS, Merging, and Covering-New). The results demonstrate that SymPcNSGA-Testing outperforms some of KLEE’s strategies by achieving high branch coverage while effectively mitigating the path explosion problem. This study highlights the benefits of combining symbolic analysis and evolutionary multi-objective optimization to enhance test efficiency in complex software systems.

Cited by 0Open access

Simultaneous Inversion of Explosion Size and Path Attenuation Parameters with Crustal Phase

Rong‐Song Jih · Defense Technical Information Center (DTIC) · 1992

An iterative procedure is presented to invert for the path gamma and the event mb(Lg) values simultaneously without using any a priori information about the path gamma. This joint inversion scheme can be applied to data from multiple test sites as well. With this iterative method, it is rather easy to incorporate the appropriate boundary condition into the inversion. The iterative scheme is less sensitive to rounding errors, and hence it is numerically more accurate than those direct methods based on matrix factorization or Gaussian elimination. When the number of equations becomes large, the iterative method is often the only practical means to tackle the problem. The iterative joint inversion scheme has been applied to Nuttli's Semipalatinsk Mb(Lg) data set furnished by DARPA/NMRO. The result indicates that the majority of Qo values Nuttli used in his pioneering Lg study appear to be very good except for the path from Eastern Kazakh to COP (Copenhagen, Denmark). An 8% increase in Nuttli's postulated coefficient of anelastic attenuation, Qo, for this particular path is necessary. Overall, Nuffli's (1986b, 1987) mb(Lg) data set for Semipalatinsk explosions appears to have very good quality with a standard deviation (of single observation) of only 0.1 magnitude unit.

Cited by 0

The Accident Path of Coal Mine Gas Explosion Based on 24Model: A Case Study of the Ruizhiyuan Gas Explosion Accident

Gui Fu, Ziqi Zhao, Chuanbo Hao et al. · Processes · 2019

In order to effectively prevent coal mine accidents, we selected the most serious type of accident in coal mines—gas explosions—as the research object. Based on the accident causation model (24Model), we propose an action path and analysis steps of accidents caused by different employees in the organization. A gas explosion coal mine accident was analyzed using the 24Model and the proposed action path, and 12 unsafe actions, 3 unsafe states, 4 habitual behaviors, 10 safety management systems, and 10 safety cultures were obtained. Case analysis results show that by using the 24Model and path analysis the proposed effect can help employees to clearly identify the cause of the accident, to better understand the logical relationship with the causes of the accident, improve the effectiveness of training, and effectively prevent similar accidents. The 24Model and the proposed path can be used to comprehensively analyze the reasons for and help to effectively prevent coal mine gas explosion accidents.

Cited by 60Open access

Global path planning for explosion-proof robot based on improved ant colony optimization

Honglei Che, Zongzhi Wu, Rongxue Kang et al. · 2016

The Explosion-Proof Robot (EPR) is widely applied in environmental monitoring of uncertain danger sources, path planning is the premise for fulfilling the task successfully. A global path planning approach based on improved Ant Colony Optimization (ACO) is proposed to find the optimal path in the uncertain environment. Grid method is used to establish environment modeling of the robot. The global information of working environment is adopted to establish target attraction function, which guide the ant colony to improve the probability of selecting the optimal path to the target point (danger source). Meanwhile, a rule updating the pheromone based on the assignment rule of wolf colony is proposed, which solves the problem of getting into local optimum and increasing the convergence speed. Finally, comparing with classical ACO through simulation in simple and complicated environment, the proposed algorithm is verified to have a good dynamic performance and could converge to the shortest path quickly.

Cited by 14

Core-Collapse Supernova Explosion Simulations: The Path to and Necessity for 3D Models

Adam Burrows, Jason Nordhaus, I. Hubený et al. · AIP conference proceedings · 2009

We discuss the current status of progress towards unraveling the mystery of the core‐collapse supernova mechanism. We advance the notion that the fundamental impediment to progress in supernova theory over several decades has been the lack of access to codes and computers with which to properly simulate the collapse phenomenon in 3D. There may be qualitative differences between 1D, 2D, and 3D models. Since 3D capabilities have only recently become a viable hope, this could explain theory’s slow march since the 1960’s towards demonstrating a robust mechanism of explosion. It has been shown that one‐dimensional, spherical explosions require a set of rare progenitor characteristics. Moreover, when they explode they are generically underenergetic. Two‐dimensional simulations are still ambiguous and problematic, though they manifest some of the multi‐dimensional effects shown to enable explosion (Murphy & Burrows 2008). In this contribution, we summarize the recent results from the various leading groups still engaged in exploring the explosion mechanism and describe our new 3D AMR radiation/hydrodynamics code CASTRO that promises to help address the remaining issues that surround this most central, if problematic, puzzle in theoretical astrophysics.

Cited by 4

Tackling the Path Explosion Problem in Symbolic Execution-Driven Test Generation for Programs

Saparya Krishnamoorthy, Michael S. Hsiao, Loganathan Lingappan · 2010

Symbolic techniques have been shown to be very effective in path-based test generation, however, they fail to scale to large programs due to the exponential number of paths to be explored. In this paper, we focus on tackling this path explosion problem and propose search strategies to achieve quick branch coverage under symbolic execution, while exploring only a fraction of paths in the program. We present a reach ability-guided strategy that makes use of the reach ability graph of the program to explore unvisited portions of the program and a conflict-driven backtracking strategy that utilizes conflict analysis to perform nonchronological backtracking. We present experimental evidence that these strategies can significantly reduce the search space and improve the speed of test generation for programs.

Cited by 34

Triple point path prediction for height of burst explosion in high-altitude environment

Rui Li, Mengjun Hu, Rui Sun et al. · Defence Technology · 2024

Accurately forecasting the triple point (TP) path is essential for analyzing blast loads and assessing the destructive effectiveness of the height of burst explosion. Empirical models that describe the TP path under normal temperature and pressure environments are commonly employed; however, in certain configurations, such as at high altitudes (HAs), the environment may involve low temperature and pressure conditions. The present study develops a theoretical prediction model for the TP path under reduced pressure and temperature conditions, utilizing the image bursts method, reflected polar analysis, and dimensional analysis. The model's accuracy is evaluated through numerical simulations and experimental data. Results indicate that the prediction model effectively evaluates the TP path under diminished temperature and pressure conditions, with most predictions falling within a ±15% deviation. It was found that the TP height increases with altitude. As the altitude rises from 0 m to 10,000 m, the average TP height increases by 61.7%, 87.9%, 109.0%, and 134.3% for the scaled height of burst of 1.5 m, 2.0 m, 2.5 m, and 3.0 m, respectively. Moreover, the variation in TP height under HA environments closely mirrors that observed under corresponding reduced pressure conditions. In HA environments, only the effect of low-pressure conditions on the TP path needs to be considered, as the environmental low-temperature has a minimal effect.

Cited by 0Open access

The Pyramid Explosion: A Dynamic Dual-Path Social Gears Model Beyond Maslow's Hierarchy

aby housh, Najm · Zenodo (CERN European Organization for Nuclear Research) · 2025

Title: The Pyramid Explosion: A Dynamic Dual-Path Social Gearbox Model Beyond Maslow’s Hierarchy Description:Why do we sometimes choose status over survival? This paper challenges the classical understanding of human motivation pioneered by Abraham Maslow. We critically examine the limitations of Maslow's hierarchy and other influential models (including ERG, Prospect Theory, Nudge Theory, and Social Contagion approaches) and propose a dynamic alternative: The Social Gearbox Model. Our model decodes complex real-world behaviors that traditional hierarchies fail to explain, such as: · Why individuals sacrifice basic needs for symbolic status (e.g., purchasing luxury water for prestige).· Why people with comparable incomes exhibit radically different consumption patterns.· How social networks reshape decisions through “social gears” and “behavioral momentum.” Key Contributions: · Dual-Path Motivation: Models the bidirectional interaction between functional needs (f→a) and symbolic drives (a→f).· Social Gears Mechanism: Explains influence through three interlocking levels: Individual, Close Circle, and Society.· Momentum Dynamics: Describes how decisions build toward “explosive thresholds” triggering behavioral shifts.· Topological Analysis: Replaces linear hierarchies with a dynamic satisfaction landscape. Applications Across Fields: · Consumer Behavior: Designs strategies targeting both rational and symbolic drivers.· Public Policy: Predicts collective priority shifts during crises (e.g., pandemics, recessions).· Organizational Leadership: Balances material incentives with social and symbolic value. This framework establishes a new foundation for motivation science, integrating psychology, sociology, and behavioral economics. It opens pathways for empirical testing and interdisciplinary research. Keywords:Maslow hierarchy critique, human motivation, behavioral economics, social influence, dual-path motivation, consumer behavior, nudge theory critique, social networks, complex systems, decision-making, Pyramid Explosion, social gears, dynamic model, motivational framework, topological psychology, crisis behavior, social media influence.

Cited by 0Open access

Remaining capacity estimation for buildings after an explosion using the adaptive alternate path analysis

Edward Eskew, Shinae Jang · Advances in Structural Engineering · 2019

After an explosion, determining the remaining capacity of a structure to resist a progressive collapse can provide valuable information for emergency operations and decision makers. Condition assessments after a blast are commonly performed with a visual inspection. However, visual inspections can be time-consuming and involve putting additional personnel into harm’s way. Analytical blast analyses can estimate a structures post-blast condition, but to achieve a high level of accuracy these analyses can be time-consuming and require information regarding the blast event which may not be available at the time. This presents a need for a threat independent post-blast analysis method, which can assess for the post-blast structural condition without requiring personnel to enter the structure. The alternate path method has been used to design buildings to resist a progressive collapse; however, it does not incorporate damage outside of element failure making it unsuitable for post-blast condition assessments. Model updating using modal properties from vibration measurements has been used in structural health monitoring to estimate damage on structures, but it has not been applied to post-blast structures. In this article, a method to estimate the remaining elemental structural capacity of a post-blast structure, called the adaptive alternate path analysis, is presented. This method involves using the alternate path method to assess an updated numerical model, which incorporates the buildings’ structural damage. To demonstrate the impact of incorporating additional damage beyond elemental failure on a structure’s capacity, a simulated study is presented using simulated stiffness reductions. A blast simulation is then used to show the capacity of the updated numerical model to represent the post-blast structure and the improvements gained over using the original model. The presented methodology can be used to assess a structures potential for progressive collapse after a blast, leading to safer emergency operations.

Cited by 2