gzip
1.14Terms
- Run
- One campaign of one tool on one program.
- Cores
- The parallel processes of one campaign.
- Budget
- The longest a campaign may run.
- Fixed track
- The command line is given and the tool supplies only the input. Method
- Open track
- The tool also chooses arguments, files and environment. Method
- Median
- The middle value over a tool's runs; the median of two runs is their mean.
- standard
- Conventional gcov replay of every retained test case, same counting code and denominators. Method
- Unreached
- A branch that none of the main-group tools that ran on the program reaches (4 to 12 tools).
- Union of runs
- The branches that at least one of a tool's runs reaches, each counted once.
- Output tokens
- Model output of a whole campaign, reasoning included, as self-reported in the release.
- Sanitiser signature
- The sanitiser, the error kind and the innermost frame in the program's own source; two can share a cause.
- Language model
- A system in which a language model does the central reasoning of a classical technique, such as concolic execution.
- Symbolic
- Runs the program on symbolic inputs and asks a constraint solver for concrete inputs that reach new paths.
- Fuzzer
- Coverage-guided fuzzing: mutates inputs and keeps those that reach new code.
- Hybrid
- A fuzzer paired with a concolic executor; each supplies the other with inputs.
- Main
- Shown by default: the tools a reader is most likely to compare.
- Ablation
- Variants of the agent that switch off or change one part, to show what that part adds.
- Seeding
- Runs of a tool that start from seeds produced by another system.
- Control
- Systems that run without the agent, as a reference for the main group.
- Release
- A dated snapshot of the data, named like 2026.1. It never changes; corrections go into the next release.
- Superseded
- An entry that a newer one replaces. It stays in the release and shows under all versions.
- Withdrawn
- An entry taken out of the comparison after it was published.
GNU gzip compresses files with the DEFLATE algorithm and gzip -d decompresses them.
- Branches
- 3,08338.9% unreached (6 tools)
- Language
- C
- Inputs
- command-line arguments, files, standard input, environment
- Fixed track
- none agreed
- Tools with runs
- 216 main
- Runs
- 6969 with branch sets
Branch map
1 tool 1172 to 3 3064 tools 695 tools 231all 6 1,162Unreached 1,198
Coverage over time
Use the left and right arrow keys, Home and End to move along the time axis. The value of every line at that time is read out.
The chart needs JavaScript. The final values are in the Final coverage table below.
Showing 6 of 6
Showing 12 of 13
Showing 2 of 2
Showing 6 of 6
Curves:
curves/ in the results repositoryFinal coverage
| Tool | Median | Min to max | Share (median) | Runs | Median curve | Output tokens |
|---|---|---|---|---|---|---|
| Main group, 6 tools | ||||||
Agolic KLEE, GPT-5.5agent, open track, six cores, version 1.0.1+ | 1,566 | 1,563–1,571 | 50.8% | 3 | 265,374 | |
Agolic KLEE, DeepSeek V4.1 Flashagent, open track, six cores, version 1.0.1+ | 1,636 | 1,625–1,662 | 53.1% | 3 | 1,417,262 | |
Agolic Direct-Input, DeepSeek V4.1 Flashagent, open track, six cores, version 1.0.1+ | 1,790 | 1,718–1,836 | 58.1% | 3 | 3,208,166 | |
KLEE fixed options, 6 coressymbolic, open track, six cores, version efa1e052 | 1,099 | 1,088–1,102 | 35.6% | 3 | not applicable | |
KLEE uniform options, 6 coressymbolic, open track, six cores, version efa1e052 | 1,430 | 1,419–1,434 | 46.4% | 3 | not applicable | |
SymTuner, 6 coressymbolic, open track, six cores, version 71806b45 | 1,451 | 1,433–1,461 | 47.1% | 3 | not applicable | |
| Ablation group, 10 tools | ||||||
Agolic KLEE, GPT-5.5, effort lowagent, open track, six cores, version 1.0.1+ | 1,534 | 1,502–1,553 | 49.8% | 3 | 160,285 | |
Agolic KLEE, GPT-5.5, effort extra highagent, open track, six cores, version 1.0.1+ | 1,564 | 1,539–1,659 | 50.7% | 3 | 296,347 | |
Agolic KLEE, GPT-5.5, Harness-Entry Mode onlyagent, open track, six cores, version 1.0.1+ | 1,356 | 1,343–1,390 | 44.0% | 3 | 213,053 | |
Agolic KLEE, GPT-5.5, Seeded-Prefix Mode onlyagent, open track, six cores, version 1.0.1+ | 1,522 | 1,499–1,530 | 49.4% | 3 | 167,709 | |
Agolic KLEE, GPT-5.5, seed finder offagent, open track, six cores, version 1.0.1+ | 1,543 | 1,494–1,545 | 50.0% | 3 | 252,480 | |
Agolic KLEE, GPT-5.5, proposal review offagent, open track, six cores, version 1.0.1+ | 1,584 | 1,543–1,607 | 51.4% | 3 | 157,408 | |
Agolic KLEE, GPT-5.5, run history withheldagent, open track, six cores, version unknown | 1,487 | 1,485–1,526 | 48.2% | 3 | 193,802 | |
Agolic KLEE, DeepSeek V4.1 Flash, effort lowagent, open track, six cores, version 1.0.1+ | 1,674 | 1,650–1,718 | 54.3% | 3 | 1,600,709 | |
Agolic KLEE, DeepSeek V4.1 Flash, effort highagent, open track, six cores, version 1.0.1+ | 1,706 | 1,637–1,771 | 55.3% | 3 | 2,120,385 | |
Agolic KLEE, GPT-5.4 supersededagent, open track, six cores, version unreleased+ | 1,534 | 1,450–1,582 | 49.8% | 3 | not reported | |
| Seeding group, 2 tools | ||||||
SymTuner rerun, 6 coressymbolic, open track, six cores, version 71806b45 | 1,456 | 1,452–1,459 | 47.2% | 3 | not applicable | |
SymTuner from the agent's seeds, 6 cores, its own testssymbolic, open track, six cores, version 71806b45 | 1,497 | 1,482–1,522 | 48.6% | 3 | not applicable | |
| Control group, 3 tools | ||||||
KLEE fixed options, 1 coresymbolic, open track, one core, version efa1e052 | 678 | 583–1,003 | 22.0% | 5 | not applicable | |
KLEE uniform options, 1 coresymbolic, open track, one core, version efa1e052 | 1,203 | 1,186–1,341 | 39.0% | 5 | not applicable | |
SymTuner, 1 coresymbolic, open track, one core, version 71806b45 | 1,311 | 1,198–1,422 | 42.5% | 5 | not applicable | |
finals.csv in the results repositoryBranches reached by one tool only
| Tool | Runs in union | Branches reached | Share (union) | Reached by this tool only |
|---|---|---|---|---|
Agolic KLEE, GPT-5.5 | 3 | 1,658 | 53.8% | 0 |
Agolic KLEE, DeepSeek V4.1 Flash | 3 | 1,699 | 55.1% | 2 |
Agolic Direct-Input, DeepSeek V4.1 Flash | 3 | 1,847 | 59.9% | 115 |
KLEE fixed options, 6 cores | 3 | 1,172 | 38.0% | 0 |
KLEE uniform options, 6 cores | 3 | 1,464 | 47.5% | 0 |
SymTuner, 6 cores | 3 | 1,496 | 48.5% | 0 |
Sanitiser findings
Signatures in each tool’s final test cases.
| Tool | Runs replayed | AddressSanitizerkind, signatures | UndefinedBehaviorSanitizerkind, signatures |
|---|---|---|---|
Agolic KLEE, GPT-5.5 | 3 | none found |
|
Agolic KLEE, DeepSeek V4.1 Flash | 3 | none found |
|
Agolic Direct-Input, DeepSeek V4.1 Flash | 3 | none found |
|
KLEE fixed options, 6 cores | 3 | none found |
|
KLEE uniform options, 6 cores | 3 | none found |
|
SymTuner, 6 cores | 3 | none found |
|
KLEE fixed options, 1 core | 5 | none found | none found |
KLEE uniform options, 1 core | 5 | none found |
|
SymTuner, 1 core | 5 | none found |
|
Agolic KLEE, GPT-5.4 | 3 | none found |
|
Agolic KLEE, GPT-5.5, effort low | 3 | none found |
|
Agolic KLEE, GPT-5.5, effort extra high | 3 | none found |
|
Agolic KLEE, GPT-5.5, Harness-Entry Mode only | 3 | none found |
|
Agolic KLEE, GPT-5.5, Seeded-Prefix Mode only | 3 | none found |
|
Agolic KLEE, GPT-5.5, seed finder off | 3 | none found |
|
Agolic KLEE, GPT-5.5, proposal review off | 3 | none found |
|
Agolic KLEE, GPT-5.5, run history withheld | 3 | none found |
|
Agolic KLEE, DeepSeek V4.1 Flash, effort low | 3 | none found |
|
Agolic KLEE, DeepSeek V4.1 Flash, effort high | 3 | none found |
|
SymTuner rerun, 6 cores | 3 | none found |
|
SymTuner from the agent's seeds, 6 cores, its own tests | 3 | none found |
|
Counts are of untriaged signatures. † marks fewer than three runs.