> a paper appeared (in CACM?) that repeated
Dennis's exercise.
Maybe this one?
B.P. Miller, L. Fredriksen, and B. So, "An
Empirical Study of the Reliability
of UNIX Utilities", Communications of the ACM 33, 12 (December 1990).
Probably. I had forgotten that the later effort was considerably more
elaborate than Dennis's. It created multiple random inputs that might
stumble on other things besides buffer overflow. I see a Unix parable
in the remarkable efficacy of Dennis's single-shot test.
Doug