Acknowledgements Thanks to Max Willsey, Gus Smith, and the anonymous reviewers for
their 26 helpful feedback on early drafts. This research was supported in part by the National …

Typestate analysis is a commonly used static technique to identify software vulnerabilities by
assessing if a sequence of operations violates temporal safety specifications defined by a …

Path-sensitive abstract execution is an effective technique for statically approximating
program runtime behaviors, leveraging the strengths of path-sensitive analysis within the …

Testing and other unsound analyses are developer-friendly but cannot give guarantees that
programs are free of bugs. Verification and other extant sound approaches can give …