Thu 14 Nov 2019 15:10 - 15:20 at Cortez 2&3 - Mining and Bug Detection Chair(s): Chanchal K. Roy
Misuse of APIs happens frequently due to misunderstanding of API semantics and lack of documentation. An important category of API-related defects is the error handling defects, which may result in security and reliability flaws. These defects can be detected with the help of static program analysis, provided that error specifications are known. The error specification of an API function indicates how the function can fail. Writing error specifications manually is time-consuming and tedious. Therefore, automatic inferring the error specification from API usage code is preferred. In this paper, we present Ares, a tool for automatically inferring error specifications for C code through static analysis. we employ multiple heuristics to identify error handling blocks and infer error specifications by analyzing the corresponding condition logic. Ares is evaluated on 19 real world projects, and the results reveal that Ares outperforms the state-of-the-art tool APEx by 37% in precision. Ares can also identify more error specifications than APEx. Moreover, the specifications inferred from Ares help find dozens of API-related bugs in well-known projects such as OpenSSL, among them 10 bugs are confirmed by developers. Video: https://youtu.be/nf1QnFAmu8Q. Repository: https://github.com/lc3412/Ares.
Tue 12 NovDisplayed time zone: Tijuana, Baja California change
10:00 - 10:40 | |||
10:00 40mDemonstration | Pangolin: An SFL-based Toolset for Feature Localization Demonstrations Bruno Miguel Sotto-Mayor de Castro Machado IST, University of Lisbon, Alexandre Perez Palo Alto Research Center, Rui Abreu Instituto Superior Técnico, U. Lisboa & INESC-ID | ||
10:00 40mDemonstration | A Quantitative Analysis Framework for Recurrent Neural Network Demonstrations Xiaoning Du Nanyang Technological University, Xiaofei Xie Nanyang Technological University, Yi Li Nanyang Technological University, Lei Ma Kyushu University, Yang Liu Nanyang Technological University, Singapore, Jianjun Zhao Kyushu University | ||
10:00 40mDemonstration | Ares: Inferring Error Specifications through Static Analysis Demonstrations Li Chi Tsinghua University, Zuxing Gu School of Software, Tsinghua University, Min Zhou Tsinghua University, Ming Gu Tsinghua University, Hongyu Zhang The University of Newcastle | ||
10:00 40mDemonstration | SiMPOSE - Configurable N-Way Program Merging Strategies for Superimposition-based Analysis of Variant-Rich Software Demonstrations Dennis Reuling Software Engineering Group, University of Siegen, Udo Kelter Software Engineering Group, University of Siegen, Sebastian Ruland TU Darmstadt, Real-time Systems Lab, Malte Lochau TU Darmstadt Pre-print Media Attached File Attached | ||
10:00 40mDemonstration | VeriAbs : Verification by Abstraction and Test Generation Demonstrations Mohammad Afzal Tata Cosultancy Services, A Asia Tata Cosultancy Services, Avriti Chauhan Tata Cosultancy Services, Bharti Chimdyalwar Tata Consultancy Services, Priyanka Darke Tata Consultancy Services, Advaita Datar Tata Consultancy Services Ltd, Shrawan Kumar Tata Cosultancy Services, R Venkatesh Tata Research Development and Design Centre | ||
10:00 40mDemonstration | DeepHunter: A Coverage-Guided Fuzzer for Deep Neural Networks Demonstrations Xiaofei Xie Nanyang Technological University, Hongxu Chen Nanyang Technological University, Yi Li Nanyang Technological University, Lei Ma Kyushu University, Yang Liu Nanyang Technological University, Singapore, Jianjun Zhao Kyushu University | ||
10:00 40mDemonstration | SPrinter: A Static Checker for Finding Smart Pointer Errors in C++ Programs Demonstrations Xutong Ma Institute of Software, Chinese Academy of Sciences, Jiwei Yan Institute of Software, Chinese Academy of Sciences, Yaqi Li Institute of Software, Chinese Academy of Sciences, Jun Yan Institute of Software, Chinese Academy of Sciences, Jian Zhang Institute of Software, Chinese Academy of Sciences | ||
10:00 40mDemonstration | LIRAT: Layout and Image Recognition Driving Automated Mobile Testing of Cross-Platform Demonstrations Shengcheng Yu Nanjing University, China, Chunrong Fang Nanjing University, Yang Feng University of California, Irvine, Wenyuan Zhao Nanjing University, Zhenyu Chen Nanjing University File Attached | ||
10:00 40mDemonstration | FogWorkflowSim: An Automated Simulation Toolkit for Workflow Performance Evaluation in Fog Computing Demonstrations Xiao Liu School of Information Technology, Deakin University, Lingmin Fan School of Computer Science and Technology, Anhui University, Jia Xu School of Computer Science and Technology, Anhui University, Xuejun Li School of Computer Science and Technology, Anhui University, Lina Gong School of Computer Science and Technology, Anhui University, John Grundy Monash University, Yun Yang Swinburne University of Technology | ||
10:00 40mDemonstration | SGUARD: A Feature-based Clustering Tool for Effective Spreadsheet Defect Detection Demonstrations Da Li State Key Lab. for Novel Software Tech. and Dept. of Comp. Sci. and Tech., Nanjing University, Nanjing, China, Huiyan Wang State Key Lab. for Novel Software Tech. and Dept. of Comp. Sci. and Tech., Nanjing University, Nanjing, China, Chang Xu Nanjing University, Ruiqing Zhang Search Tech. Center Asia, Microsoft, Suzhou, China, Shing-Chi Cheung Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, Xiaoxing Ma State Key Lab. for Novel Software Tech. and Dept. of Comp. Sci. and Tech., Nanjing University | ||
10:00 40mDemonstration | FPChecker: Detecting Floating-Point Exceptions in GPU Applications Demonstrations Ignacio Laguna Lawrence Livermore National Laboratory | ||
10:00 40mDemonstration | PMExec: An Execution Engine of Partial UML-RT Models Demonstrations Mojtaba Bagherzadeh Queen's University, Karim Jahed Queen's University, Nafiseh Kahani Queen's University, Juergen Dingel Queen's University, Kingston, Ontario Pre-print |
Thu 14 NovDisplayed time zone: Tijuana, Baja California change
13:40 - 15:20 | Mining and Bug DetectionDemonstrations / Journal First Presentations at Cortez 2&3 Chair(s): Chanchal K. Roy University of Saskatchewan | ||
13:40 20mTalk | Automatically 'Verifying' Complex Systems through Learning, Abstraction and Refinement Journal First Presentations Jingyi Wang National University of Singapore, Singapore, Jun Sun Singapore Management University, Singapore, Shengchao Qin University of Teesside, Cyrille Jegourel ISTD, Singapore University of Technology and Design Link to publication | ||
14:00 20mTalk | Interactive semi-automated specification mining for debugging: An experience report Journal First Presentations Mohammad Jafar Mashhadi University of Calgary, Taha R. Siddiqui InfoMagnetics Technologies Corp, Hadi Hemmati University of Calgary, Howard W. Loewen Department of Electrical & Computer Engineering, University of Calgary Link to publication | ||
14:20 20mTalk | Improving reusability of software libraries through usage pattern mining Journal First Presentations Mohamed Aymen Saied Concordia University, Ali Ouni ETS Montreal, University of Quebec, Houari Sahraoui Université de Montréal, Raula Gaikovina Kula NAIST, Katsuro Inoue Osaka University, David Lo Singapore Management University Link to publication | ||
14:40 20mTalk | Rule-based specification mining leveraging learning to rank Journal First Presentations Zherui Cao Zhejiang University, Yuan Tian Queens University, Kingston, Canada, Tien-Duy B. Le School of Information Systems, Singapore Management University, David Lo Singapore Management University Link to publication | ||
15:00 10mDemonstration | TsmartGP: A Tool for Finding Memory Defects with Pointer Analysis Demonstrations Yuexing Wang Tsinghua University, Guang Chen Tsinghua University, Min Zhou Tsinghua University, Ming Gu Tsinghua University, Jiaguang Sun Tsinghua University | ||
15:10 10mDemonstration | Ares: Inferring Error Specifications through Static Analysis Demonstrations Li Chi Tsinghua University, Zuxing Gu School of Software, Tsinghua University, Min Zhou Tsinghua University, Ming Gu Tsinghua University, Hongyu Zhang The University of Newcastle |