{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:C32N5XOZMDGYCKV4F777YUQXBD","short_pith_number":"pith:C32N5XOZ","canonical_record":{"source":{"id":"2202.12336","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-24T19:48:45Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"b3079ba47b1293ba92c40374c8d23d6cddc6d52a73510e9036a3e9975575cff9","abstract_canon_sha256":"41aaffe7b021b90219bf1f3c3152f6df257293e84d15dcd4022d8942249a052c"},"schema_version":"1.0"},"canonical_sha256":"16f4deddd960cd812abc2ffffc521708eb0e2a44134fb250709c118eaa0459d2","source":{"kind":"arxiv","id":"2202.12336","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.12336","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"arxiv_version","alias_value":"2202.12336v2","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.12336","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_12","alias_value":"C32N5XOZMDGY","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_16","alias_value":"C32N5XOZMDGYCKV4","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_8","alias_value":"C32N5XOZ","created_at":"2026-07-05T06:19:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:C32N5XOZMDGYCKV4F777YUQXBD","target":"record","payload":{"canonical_record":{"source":{"id":"2202.12336","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-24T19:48:45Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"b3079ba47b1293ba92c40374c8d23d6cddc6d52a73510e9036a3e9975575cff9","abstract_canon_sha256":"41aaffe7b021b90219bf1f3c3152f6df257293e84d15dcd4022d8942249a052c"},"schema_version":"1.0"},"canonical_sha256":"16f4deddd960cd812abc2ffffc521708eb0e2a44134fb250709c118eaa0459d2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:19:33.969362Z","signature_b64":"eoSKZj1iUbSslTLasEBK/rNQRK0VcLzzwj66sa6W1DUFfq93vTCeZsnfAygWkKPmNc0gt6XdFy7dEw3YTSqiDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"16f4deddd960cd812abc2ffffc521708eb0e2a44134fb250709c118eaa0459d2","last_reissued_at":"2026-07-05T06:19:33.968889Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:19:33.968889Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.12336","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:19:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eEt2hA/BlTC57HNAn4A3LIbPqK6sEPrkc450l13e/2sgqkWsU0hdleMANychKo2k1X++U5TJzuPH8cw+XqbwDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T10:14:40.860620Z"},"content_sha256":"6f5815f5fb9c2160b3f7909f834caa9dc75e3b18d2f8fd3cb6326a22baebfcd6","schema_version":"1.0","event_id":"sha256:6f5815f5fb9c2160b3f7909f834caa9dc75e3b18d2f8fd3cb6326a22baebfcd6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:C32N5XOZMDGYCKV4F777YUQXBD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatically Mitigating Vulnerabilities in Binary Programs via Partially Recompilable Decompilation","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Adam Doup\\'e, Hui Jun Tay, Pemma Reiter, Ruoyu Wang, Stephanie Forrest, Westley Weimer","submitted_at":"2022-02-24T19:48:45Z","abstract_excerpt":"Vulnerabilities are challenging to locate and repair, especially when source code is unavailable and binary patching is required. Manual methods are time-consuming, require significant expertise, and do not scale to the rate at which new vulnerabilities are discovered. Automated methods are an attractive alternative, and we propose Partially Recompilable Decompilation (PRD). PRD lifts suspect binary functions to source, available for analysis, revision, or review, and creates a patched binary using source- and binary-level techniques. Although decompilation and recompilation do not typically w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.12336","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.12336/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:19:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fRqgmtdkR5b7kXWluM0WqDnlapOZSOhXK0ENaTAYvRGSupXeYzqmJtUibPfJBc1F32aUuY2jW2oJNvuwGOpfDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T10:14:40.860938Z"},"content_sha256":"037672315068aa6345553e8e36ebb95e31b755559c876e08e33f411030dfb7ab","schema_version":"1.0","event_id":"sha256:037672315068aa6345553e8e36ebb95e31b755559c876e08e33f411030dfb7ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C32N5XOZMDGYCKV4F777YUQXBD/bundle.json","state_url":"https://pith.science/pith/C32N5XOZMDGYCKV4F777YUQXBD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C32N5XOZMDGYCKV4F777YUQXBD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T10:14:40Z","links":{"resolver":"https://pith.science/pith/C32N5XOZMDGYCKV4F777YUQXBD","bundle":"https://pith.science/pith/C32N5XOZMDGYCKV4F777YUQXBD/bundle.json","state":"https://pith.science/pith/C32N5XOZMDGYCKV4F777YUQXBD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C32N5XOZMDGYCKV4F777YUQXBD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:C32N5XOZMDGYCKV4F777YUQXBD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"41aaffe7b021b90219bf1f3c3152f6df257293e84d15dcd4022d8942249a052c","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-24T19:48:45Z","title_canon_sha256":"b3079ba47b1293ba92c40374c8d23d6cddc6d52a73510e9036a3e9975575cff9"},"schema_version":"1.0","source":{"id":"2202.12336","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.12336","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"arxiv_version","alias_value":"2202.12336v2","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.12336","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_12","alias_value":"C32N5XOZMDGY","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_16","alias_value":"C32N5XOZMDGYCKV4","created_at":"2026-07-05T06:19:33Z"},{"alias_kind":"pith_short_8","alias_value":"C32N5XOZ","created_at":"2026-07-05T06:19:33Z"}],"graph_snapshots":[{"event_id":"sha256:037672315068aa6345553e8e36ebb95e31b755559c876e08e33f411030dfb7ab","target":"graph","created_at":"2026-07-05T06:19:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.12336/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vulnerabilities are challenging to locate and repair, especially when source code is unavailable and binary patching is required. Manual methods are time-consuming, require significant expertise, and do not scale to the rate at which new vulnerabilities are discovered. Automated methods are an attractive alternative, and we propose Partially Recompilable Decompilation (PRD). PRD lifts suspect binary functions to source, available for analysis, revision, or review, and creates a patched binary using source- and binary-level techniques. Although decompilation and recompilation do not typically w","authors_text":"Adam Doup\\'e, Hui Jun Tay, Pemma Reiter, Ruoyu Wang, Stephanie Forrest, Westley Weimer","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-24T19:48:45Z","title":"Automatically Mitigating Vulnerabilities in Binary Programs via Partially Recompilable Decompilation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.12336","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6f5815f5fb9c2160b3f7909f834caa9dc75e3b18d2f8fd3cb6326a22baebfcd6","target":"record","created_at":"2026-07-05T06:19:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"41aaffe7b021b90219bf1f3c3152f6df257293e84d15dcd4022d8942249a052c","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2022-02-24T19:48:45Z","title_canon_sha256":"b3079ba47b1293ba92c40374c8d23d6cddc6d52a73510e9036a3e9975575cff9"},"schema_version":"1.0","source":{"id":"2202.12336","kind":"arxiv","version":2}},"canonical_sha256":"16f4deddd960cd812abc2ffffc521708eb0e2a44134fb250709c118eaa0459d2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"16f4deddd960cd812abc2ffffc521708eb0e2a44134fb250709c118eaa0459d2","first_computed_at":"2026-07-05T06:19:33.968889Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:19:33.968889Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eoSKZj1iUbSslTLasEBK/rNQRK0VcLzzwj66sa6W1DUFfq93vTCeZsnfAygWkKPmNc0gt6XdFy7dEw3YTSqiDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:19:33.969362Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.12336","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6f5815f5fb9c2160b3f7909f834caa9dc75e3b18d2f8fd3cb6326a22baebfcd6","sha256:037672315068aa6345553e8e36ebb95e31b755559c876e08e33f411030dfb7ab"],"state_sha256":"20d5ec61d65ff9a3908cad75ca8f4fd00c460bd103450c86ea581b10128c40af"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6sMQ/kzZ56Giug8sglekJ1ef1QSUIQGOlyCXCsuILBKam3jroAg72GFNfEh3cMDY37lG+vNP/sojn/t1BG7uAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T10:14:40.863312Z","bundle_sha256":"29482db7b3f8774dfa2a3958c8b459f79fb676cd98488cca10eb2c91d50e1da2"}}