Constrained-Based Symbolic Execution on Virtual Models for Functional Coverage Verification

in this paper, we present a new approach for automatic test case generation with symbolic execution on virtual model. The test case generation is based on the concept of constrained-based and assertion-based techniques. We use the constrained-based technique in order to show preferences for the generated test cases and to obtain the desired goal of functional coverage. Basic idea of our technique is generating test cases from assertions. We used the assertion functions of the symbolic executor tool KLEE. With such setting, KLEE will carry out the virtual model through different paths in order to reach the assertion. Hence, the related test cases will validate the coverage of the assertion. To trigger the device to go through several states, we developed an additional method based on special functional coverage criteria. We present preliminary results on the test cases generation using a case study from ARM QEMU models. Our experimental results show that the proposed approach is efficient.