返回
Automated Patch Transplantation
DOI:10.1145/3412376.png)
摘要
En 中文
Automated program repair is an emerging area that attempts to patch software errors and vulnerabilities. In this article, we formulate and study a problem related to automated repair, namely automated patch transplantation. A patch for an error in a donor program is automatically adapted and inserted into a similar target program. We observe that despite standard procedures for vulnerability disclosures and publishing of patches, many un-patched occurrences remain in the wild. One of the main reasons is the fact that various implementations of the same functionality may exist and, hence, published patches need to be modified and adapted. In this article, we therefore propose and implement a workflow for transplanting patches. Our approach centers on identifying patch insertion points, as well as namespaces translation across programs via symbolic execution. Experimental results to eliminate five classes of errors highlight our ability to fix recurring vulnerabilities across various programs through transplantation. We report that in 20 of 24 fixing tasks involving eight application subjects mostly involving file processing programs, we successfully transplanted the patch and validated the transplantation through differential testing. Since the publication of patches make an tut-patched implementation more vulnerable, our proposed techniques should serve a long-standing need in practice.
Keyword:
Program repair
code transplantation
patch transplantation
dynamic program analysis
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
A
IF:
6.2
论文数:
1.2K
被引数:
3.4K
机构
引用论文
Lys63/Met1-hybrid ubiquitin chains are commonly formed during the activation of innate immune signallingLys63/Met1-hybrid泛素链通常在先天免疫信号激活过程中形成
Quinoline and phenanthroline preparation starting from glycerol via improved microwave-assisted modified Skraup reaction
RSC Adv.
IF0

