4 citations · 4 across the 11 of their papers we have counts for
11 papers
Rust Coreutils: Rebuilding Unix Foundations in a Modern Language
Sylvestre Ledru, Samuel Tardieu, Stefano Zacchiroli
GNU core utilities (coreutils) is a crucial package in modern UNIX systems. It comprises around 100 fundamental commands---like ls, cp, and cat---which run every day on millions of…
Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation
Julien Malka, Aman Sharma, Martin Monperrus +2
Ken Thompson's trusting-trust attack, in which a compromised compiler backdoors the programs it builds and reproduces the backdoor in subsequent rebuilds of itself, is widely regar…
Understanding Build Reproducibility in the F-Droid Ecosystem
Denise Nanni, Julien Malka, Stefano Zacchiroli +2
The security of open source applications benefits considerably from the possibility of rebuilding their source and verifying the output. F-Droid, a prominent distribution for open…
Mutating the "Immutable": A Large-Scale Study of Git Tag Alterations
Solal Rapaport, Laurent Pautet, Samuel Tardieu +2
Git tags are commonly viewed as immutable references in software development, marking releases and specific repository states that underpin build reproducibility and software suppl…
Agentic Very Much! Adoption of Coding Agent in New GitHub Projects
Romain Robbes, Théo Matricon, Thomas Degueule +2
In previous work, we investigated the adoption of coding agents in GitHub projects, finding that it was very significant. This study follows this line of work, but analyses new pro…
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Minh-Luân Nguyen, Olivier Levillain, Julien Malka +2
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even w…
On the Informativeness of Security Commit Messages: A Large-scale Replication Study
Syful Islam, Stefano Zacchiroli
The informativeness of security-related commit messages is crucial for patch triage: when high, it enables the rapid distribution and deployment of security fixes. Prior research (…
On the Use of Commit Messages for Corrective Software Maintenance: A Systematic Mapping Study
Syful Islam, Stefano Zacchiroli
Corrective maintenance is crucial to ensure the quality of software, thereby improving reliability and user experience. In a version control system (VCS), developers write commit m…
Did You Forkget It? Detecting One-Day Vulnerabilities in Open-source ForksWith Global History Analysis
Romain Lefeuvre, Charly Reux, Stefano Zacchiroli +2
Tracking vulnerabilities inherited from third-party open-source software is a well-known challenge, often addressed by tracing the threads of dependency information. However, vulne…
Altered Histories in Version Control System Repositories: Evidence from the Trenches
Solal Rapaport, Laurent Pautet, Samuel Tardieu +1
Version Control Systems (VCS) like Git allow developers to locally rewrite recorded history, e.g., to reorder and suppress commits or specific data in them. These alterations have…
Where are your Manners? Sharing Best Community Practices in the Web 2.0
Angelo Di Iorio, Fabio Vitali, Davide Rossi +1
The Web 2.0 fosters the creation of communities by offering users a wide array of social software tools. While the success of these tools is based on their ability to support diffe…