Finding Memory Leaks in C/C++ Programs via Neuro-Symbolic Augmented Static Analysis

MEMHINT is a neuro-symbolic system that finds custom memory leaks in C/C++ code by combining Large Language Models (LLMs) with Z3 symbolic reasoning. It analyzes code by first using an LLM to summarize function roles, then using Z3 to verify if those roles are logically possible paths in the program. This approach successfully detected 54 unique leaks across eight projects, significantly outperforming traditional static analysis tools.

Open the full episode

More from Security Radio