Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
Cross-Ecosystem Vulnerability Analysis for Python Applications
Georgios Alexopoulos, Nikolaos Alexopoulos, Thodoris Sotiropoulos +3
Python packages often bundle third-party native libraries (e.g., OpenSSL), a practice known as vendoring. Identifying vulnerabilities in these libraries is challenging because curr…
cs.CR2024
SAND: Decoupling Sanitization from Fuzzing for Low Overhead
Ziqiao Kong, Shaohua Li, Heqing Huang +1
Sanitizers provide robust test oracles for various software vulnerabilities. Fuzzing on sanitizer-enabled programs has been the best practice to find software bugs. Since sanitizer…
cs.CR2024
UBfuzz: Finding Bugs in Sanitizer Implementations
Shaohua Li, Zhendong Su
In this paper, we propose a testing framework for validating sanitizer implementations in compilers. Our core components are (1) a program generator specifically designed for produ…