Automated vulnerability detection

[Stephan Lipp]

Dear all,

Do you use static analysis tools or fuzzers to test Binutils (2.29)? 
Together with Dr. Marcel Böhme (MPI-SP), Prof. Thorsten Holz (CISPA), 
Prof. Alexander Pretschner (TUM), Keno Hassler, and Philipp Görz (both 
also with CISPA), we are currently analyzing the strengths and 
weaknesses of automated static and dynamic testing techniques in finding 
vulnerabilities.

We are happy to share any insights from our analysis which might be also 
helpful to you. Thank you very much in advance!

Best regards,
Stephan