← Back to context

Comment by ordu

9 hours ago

> I keep struggling with is understanding how a particular state came to be — especially with concurrency or events that happened much earlier.

Yeah, I faced this problem. I have no general solution to it, but I wonder if a fuzzer can be bred with a debugger to get a tool that can given two states of a program to find inputs that can transition program from state A to state B. Maybe you would need to define state A and/or B with some predicates, so they would be a classes of states. Or maybe the tool could fuzz the state A to see what part of it are important to transition to the state B eventually.