Reflective symbolic execution