16 papers
We Must Have Missed This Comment: Detecting and Repairing Stale Function References in Linux Kernel Comments
Kexin Sun, Yunbo Lyu, Xutong Ma +6
As the Linux kernel evolves, code comments may become outdated, as the functions they reference can be refactored or removed independently without corresponding updates to the comm…
PoCEvolve: Generating Proof-of-Concept Exploits from Security Patches with Vulnerability-Aware Prompt Evolution
Duc Manh Tran, Ratnadira Widyasari, Ivana Clairine Irsan +6
Ideally, the detailed information about a vulnerability should be made available together with the fixing commit. In practice, however, such details often become available only lon…
"Go Home Copilot, You're Drunk": Understanding Developer Responses to Agent-Generated Code Review Comments
Shamse Tasnim Cynthia, Ratnadira Widyasari, Banani Roy +2
Code review is a critical quality assurance practice in software engineering development, and AI coding agents are increasingly generating review comments on pull requests. However…
From Generic to Personalized: Exploring Persona-Aware Code Review Explanations
Shamse Tasnim Cynthia, Ratnadira Widyasari, Banani Roy +2
Code review is essential for ensuring software quality and supporting collaboration, yet prior work shows that developers can interpret code review comments differently. These diff…
TitanCA: Lessons from Orchestrating LLM Agents to Discover 100+ CVEs
Ting Zhang, Yikun Li, Chengran Yang +15
Software vulnerabilities remain one of the most persistent threats to modern digital infrastructure. While static application security testing (SAST) tools have long served as the…
Mapping NVD Records to Their Vulnerability-fixing Commits: How Hard is It?
Huu Hung Nguyen, Ting Zhang, Duc Manh Tran +7
Mapping National Vulnerability Database (NVD) records to vulnerability-fixing commits (VFCs) is crucial for vulnerability analysis but challenging due to sparse explicit links in N…