Prateek Saxena Pongsin Poosankam Stephen McCamant Dawn Song Loop-extended symbolic execution on binary programs. 225-236 2009 ISSTA http://doi.acm.org/10.1145/1572272.1572299 conf/issta/2009 db/conf/issta/issta2009.html#SaxenaPMS09