Characterizing and Detecting WebAssembly Runtime Bugs

Dongliang Mu; Gang Huang; Haoyu Wang; Shangtong Cao; Xiapu Luo; Xuanzhe Liu; Yixuan Zhang; Yun Ma; Zhenpeng Chen

Characterizing and Detecting WebAssembly Runtime Bugs

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2301.12102 v1 pith:HRKAAGWB submitted 2023-01-28 cs.SE

Yixuan Zhang , Shangtong Cao , Haoyu Wang , Zhenpeng Chen , Xiapu Luo , Dongliang Mu , Yun Ma , Gang Huang

show 1 more author

Xuanzhe Liu

This is my paper · ORCID

classification cs.SE

keywords wasmbugsapplicationsruntimesbeendetectdetectiondevelopers

verification ladder T0 review T1 audit T2 compute T3 formal

Signed reviews

No signed human review yet.

0 comments

read the original abstract

WebAssembly (abbreviated WASM) has emerged as a promising language of the Web and also been used for a wide spectrum of software applications such as mobile applications and desktop applications. These applications, named as WASM applications, commonly run in WASM runtimes. Bugs in WASM runtimes are frequently reported by developers and cause the crash of WASM applications. However, these bugs have not been well studied. To fill in the knowledge gap, we present a systematic study to characterize and detect bugs in WASM runtimes. We first harvest a dataset of 311 real-world bugs from hundreds of related posts on GitHub. Based on the collected high-quality bug reports, we distill 31 bug categories of WASM runtimes and summarize their common fix strategies. Furthermore, we develop a pattern-based bug detection framework to automatically detect bugs in WASM runtimes. We apply the detection framework to five popular WASM runtimes and successfully uncover 53 bugs that have never been reported previously, among which 14 have been confirmed and 6 have been fixed by runtime developers.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

Distinguishability-guided Test Program Generation for WebAssembly Runtime Performance Testing
cs.SE 2024-12 conditional novelty 6.0 of 10

WarpGen generates issue-triggering WebAssembly test programs by recombining historical abnormal code snippets with random seeds, using a distinguishability score to guide search, and finds seven previously unknown run...

Pith tools