Since the call graph contains the vulnerable function signature, i.e. its name, parameters and return types, we can check whether this function also exists as-is in the fixed version.

Some compilers create a graph of all the basic blocks of a program, and then perform various types of optimizations based on this graph, such as dead code removal. Would it be possible to recreate ...