The basic searching algorithm is generational search(Patrice Godefroid, NDSS08). But now it can only generate one generation.
The solver I choose is STP, written by Vijay Ganesh, and published with a famous symbolic executor EXE(Dawson Engler, CCS06). Also it is used by KLEE(Dawson Engler, OSDI08, best paper).