Detecting software vulnerabilities in a binary code

A computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:

• obtaining a binary code;
• generating a base memory-write profile for the binary code, wherein the base memory-write profile comprises a count of memory updates for each of a plurality of memory locations during an execution of the binary code according to a base input;
• for each of a plurality of test inputs, generating a test memory-write profile for the binary code, wherein the test memory-write profile comprises a count of memory updates for each of the plurality of memory locations during an execution of the binary code according to the corresponding test input;
• comparing the base memory-write profile and the plurality of test memory-write profiles;
• and
• generating a notification based on the comparison, wherein the notification indicates whether there is a difference between the base memory-write profile and the plurality of test memory-write profiles.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• obtaining a binary code;
• generating a base memory-write profile for the binary code, wherein the base memory-write profile comprises a count of memory updates for each of a plurality of memory locations during an execution of the binary code according to a base input;
• for each of a plurality of test inputs, generating a test memory-write profile for the binary code, wherein the test memory-write profile comprises a count of memory updates for each of the plurality of memory locations during an execution of the binary code according to the corresponding test input;
• comparing the base memory-write profile and the plurality of test memory-write profiles;
• and
• generating a notification based on the comparison, wherein the notification indicates whether there is a difference between the base memory-write profile and the plurality of test memory-write profiles.