Finding the needle in the heap: combining static analysis and dynamic symbolic execution to trigger use-after-free.