Statically detecting use after free on binary code
Unleashing Mayhem on Binary Code