Libtiff provides support for the Tag Image File Format (TIFF), a format used for storing image data. Included are a library, libtiff, for reading and writing TIFF and a small collection of tools for doing simple manipulations of TIFF images.

GNU Binutils is a collection of tools for working with binary files. Perhaps the most notable are "ld", a linker, and "as", an assembler. Other tools include programs to display binary profiling information, list the strings in a binary file, and utilities for working with archives. The "bfd" library for working with executable and object formats is also included.

Z3 is a theorem prover and satisfiability modulo theories (SMT) solver. It provides a C/C++ API, as well as Python bindings.

Fuzzy SAT is an approximate solver that borrows ideas from the fuzzing domain. It is tailored to the symbolic expressions generated by concolic engines and can replace classic SMT solvers in this context. By analyzing the expressions contained in symbolic queries, Fuzzy SAT performs informed mutations to possibly generate new valuable inputs.

QEMU is a generic machine emulator and virtualizer.

When used as a machine emulator, QEMU can run OSes and programs made for one machine (e.g. an ARM board) on a different machine---e.g., your own PC. By using dynamic translation, it achieves very good performance.

When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU. QEMU supports virtualization when executing under the Xen hypervisor or using the KVM kernel module in Linux. When using KVM, QEMU can virtualize x86, server and embedded PowerPC, and S390 guests.

Dyninst integration for AFL++

AFLplusplus is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary. This substantially improves the functional coverage for the fuzzed code. The compact synthesized corpora produced by the tool are also useful for seeding other, more labor- or resource-intensive testing regimes down the road. It is a fork of American Fuzzy Lop fuzzer and features:

• A more recent qemu version.

• More algorithms like collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, etc.

FUZZOLIC is a concolic executor based on QEMU.

It can instrument binary programs at runtime in order to build symbolic expressions and queries. To reduce the runtime overhead and improve accuracy of the queries, it devises three analysis modes that are dynamically enabled during the program execution based on the running context.

Moreover, differently from other concolic executors, FUZZOLIC runs the solver component, which reasons over the symbolic queries generated when analyzing a program, inside another process to reduce execution interferences that may be caused by the solver and negatively affect the analyzed application.

CIVL is a framework encompassing

• a programming language, CIVL-C, which adds to C a number of concurrency primitives, as well as the to define functions in any scope. Together, these features make for a very expressive concurrent language that can faithfully represent programs using various APIs and parallel languages, such as MPI, OpenMP, CUDA, and Chapel. CIVL-C also provides a number of primitives supporting verification.

• a model checker which uses symbolic execution to verify a number of safety properties of CIVL-C programs. The model checker can also be used to verify that two CIVL-C programs are functionally equivalent.

• a number of translators from various commonly-used concurrency languages/APIs to CIVL-C (currently, MPI, OpenMP, Pthreads, and CUDA).

Pacfix systhesizes predicate expressions for program repair from values in possitive and negative examples using a PAC learning algorithm.

SymInfer is an invariant generation tool that discovers program properties at arbitrary program locations (e.g., loop invariants, post conditions). It infers program invariants or properties over program execution traces or program source code. SymInfer supports many forms of numerical invariants, including nonlinear equalities, octagonal and interval properties, min/max-plus relations, and congruence relations.

Taosc generates emergent fixes for binaries.