Testing static analysis tools using exploitable buffer overflows from open source code. - Misha Zitser; Richard Lippmann; Tim Leek (SIGSOFT FSE, 2004)