KLEE provides a framework for symbolically executing program code to find inputs to that code that would trigger undefined behaviour. Think of KLEE as an automatic test case producer for crash-bugs. KLEE is based on LLVM. KLEE depends on the Simple Theorem Prover : https://bugs.gentoo.org/show_bug.cgi?id=522388 Reproducible: Always