8 papers
These Aren't the Reviews You're Looking For How Humans Review AI-Generated Pull Requests
Kacper Duma, Patryk Wróblewski, Jagoda BobiÅska +2
We analyze code review interactions for AI-generated pull requests (PRs) on GitHub using the AIDev dataset and compare them to human-authored PRs within the same repositories. We f…
Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades
Piotr Przymus, Witold Weiner, Krzysztof Rykaczewski +1
In 2024, the Linux kernel became its own Common Vulnerabilities and Exposures (CVE) Numbering Authority (CNA), formalizing how kernel vulnerabilities are identified and tracked. We…
Adversarial Bug Reports as a Security Risk in Language Model-Based Automated Program Repair
Piotr Przymus, Andreas Happe, Jürgen Cito
Large Language Model (LLM) - based Automated Program Repair (APR) systems are increasingly integrated into modern software development workflows, offering automated patches in resp…
Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack
Piotr Przymus, Thomas Durieux
The digital economy runs on Open Source Software (OSS), with an estimated 90\% of modern applications containing open-source components. While this widespread adoption has revoluti…
How I Learned to Stop Worrying and Love ChatGPT
Piotr Przymus, MikoÅaj Fejzer, Jakub NarÄbski +1
In the dynamic landscape of software engineering, the emergence of ChatGPT-generated code signifies a distinctive and evolving paradigm in development practices. We delve into the…
HaPy-Bug -- Human Annotated Python Bug Resolution Dataset
Piotr Przymus, MikoÅaj Fejzer, Jakub NarÄbski +5
We present HaPy-Bug, a curated dataset of 793 Python source code commits associated with bug fixes, with each line of code annotated by three domain experts. The annotations offer…