Employs symbolic execution and path-sensitive analysis to find potential bugs.