{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HW6PRR2E5YGGQRSMGJWR3WCOOW","short_pith_number":"pith:HW6PRR2E","canonical_record":{"source":{"id":"2501.17413","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T04:35:37Z","cross_cats_sorted":[],"title_canon_sha256":"d835dc058ed4d558b7602478a7b113cf0a0b4f24586c75153cfa2cb5530135ed","abstract_canon_sha256":"2e4b1a4b5bf70ddb9e81e7b69fcb90e9818169e2fe9083a6625576845e4504f1"},"schema_version":"1.0"},"canonical_sha256":"3dbcf8c744ee0c68464c326d1dd84e7585b44e957d7b44f2417f7542f24328ed","source":{"kind":"arxiv","id":"2501.17413","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.17413","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.17413v1","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.17413","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_12","alias_value":"HW6PRR2E5YGG","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_16","alias_value":"HW6PRR2E5YGGQRSM","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_8","alias_value":"HW6PRR2E","created_at":"2026-07-05T10:06:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HW6PRR2E5YGGQRSMGJWR3WCOOW","target":"record","payload":{"canonical_record":{"source":{"id":"2501.17413","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T04:35:37Z","cross_cats_sorted":[],"title_canon_sha256":"d835dc058ed4d558b7602478a7b113cf0a0b4f24586c75153cfa2cb5530135ed","abstract_canon_sha256":"2e4b1a4b5bf70ddb9e81e7b69fcb90e9818169e2fe9083a6625576845e4504f1"},"schema_version":"1.0"},"canonical_sha256":"3dbcf8c744ee0c68464c326d1dd84e7585b44e957d7b44f2417f7542f24328ed","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:06:52.503382Z","signature_b64":"AqBpn1HG4p8DFM4UZnA6NiWoyFalL8yWlyFQMLonKglNRqPUPsxbjCQXZV7pXsV1OpBQv/wCzc45Xz6WKOjIDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3dbcf8c744ee0c68464c326d1dd84e7585b44e957d7b44f2417f7542f24328ed","last_reissued_at":"2026-07-05T10:06:52.502926Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:06:52.502926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.17413","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SdI3T71GvX+E5wlb/UMzCWRm91P8sis4BsbmqjF3UNDGgMOStR3UvgRSlbq5B01O3kztSw/BRMO0T0QU1a/8CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:34:37.584014Z"},"content_sha256":"03eac6a208dc847269ce7ef86c8ee56bc03a85daf05f3a9ce6a77d9d33a9d619","schema_version":"1.0","event_id":"sha256:03eac6a208dc847269ce7ef86c8ee56bc03a85daf05f3a9ce6a77d9d33a9d619"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HW6PRR2E5YGGQRSMGJWR3WCOOW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chaopeng Dong, Hong Li, Jingdong Guo, Limin Sun, Shouguo Yang, Yang Xiao, Yi Li, Zhi Li","submitted_at":"2025-01-29T04:35:37Z","abstract_excerpt":"1-day vulnerabilities in binaries have become a major threat to software security. Patch presence test is one of the effective ways to detect the vulnerability. However, existing patch presence test works do not perform well in practical scenarios due to the interference from the various compilers and optimizations, patch-similar code blocks, and irrelevant functions in stripped binaries. In this paper, we propose a novel approach named PLocator, which leverages stable values from both the patch code and its context, extracted from the control flow graph, to accurately locate the real patch co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.17413","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.17413/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:06:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lyEc1EATcvbyk/7FUcZgwMGxiCWxGvEpb8LLoR7ux4E8KwDh5OAWVFA4UtBnL0sqoIxJR/zzrhIa2qxlhOibBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:34:37.584624Z"},"content_sha256":"9ad7c6428f3595d23440264e38e6cb7d9b273455c1f808ff02183162d4f5685d","schema_version":"1.0","event_id":"sha256:9ad7c6428f3595d23440264e38e6cb7d9b273455c1f808ff02183162d4f5685d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/bundle.json","state_url":"https://pith.science/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T09:34:37Z","links":{"resolver":"https://pith.science/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW","bundle":"https://pith.science/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/bundle.json","state":"https://pith.science/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HW6PRR2E5YGGQRSMGJWR3WCOOW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HW6PRR2E5YGGQRSMGJWR3WCOOW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e4b1a4b5bf70ddb9e81e7b69fcb90e9818169e2fe9083a6625576845e4504f1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T04:35:37Z","title_canon_sha256":"d835dc058ed4d558b7602478a7b113cf0a0b4f24586c75153cfa2cb5530135ed"},"schema_version":"1.0","source":{"id":"2501.17413","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.17413","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"arxiv_version","alias_value":"2501.17413v1","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.17413","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_12","alias_value":"HW6PRR2E5YGG","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_16","alias_value":"HW6PRR2E5YGGQRSM","created_at":"2026-07-05T10:06:52Z"},{"alias_kind":"pith_short_8","alias_value":"HW6PRR2E","created_at":"2026-07-05T10:06:52Z"}],"graph_snapshots":[{"event_id":"sha256:9ad7c6428f3595d23440264e38e6cb7d9b273455c1f808ff02183162d4f5685d","target":"graph","created_at":"2026-07-05T10:06:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.17413/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"1-day vulnerabilities in binaries have become a major threat to software security. Patch presence test is one of the effective ways to detect the vulnerability. However, existing patch presence test works do not perform well in practical scenarios due to the interference from the various compilers and optimizations, patch-similar code blocks, and irrelevant functions in stripped binaries. In this paper, we propose a novel approach named PLocator, which leverages stable values from both the patch code and its context, extracted from the control flow graph, to accurately locate the real patch co","authors_text":"Chaopeng Dong, Hong Li, Jingdong Guo, Limin Sun, Shouguo Yang, Yang Xiao, Yi Li, Zhi Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T04:35:37Z","title":"Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.17413","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:03eac6a208dc847269ce7ef86c8ee56bc03a85daf05f3a9ce6a77d9d33a9d619","target":"record","created_at":"2026-07-05T10:06:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e4b1a4b5bf70ddb9e81e7b69fcb90e9818169e2fe9083a6625576845e4504f1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-29T04:35:37Z","title_canon_sha256":"d835dc058ed4d558b7602478a7b113cf0a0b4f24586c75153cfa2cb5530135ed"},"schema_version":"1.0","source":{"id":"2501.17413","kind":"arxiv","version":1}},"canonical_sha256":"3dbcf8c744ee0c68464c326d1dd84e7585b44e957d7b44f2417f7542f24328ed","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3dbcf8c744ee0c68464c326d1dd84e7585b44e957d7b44f2417f7542f24328ed","first_computed_at":"2026-07-05T10:06:52.502926Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:06:52.502926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AqBpn1HG4p8DFM4UZnA6NiWoyFalL8yWlyFQMLonKglNRqPUPsxbjCQXZV7pXsV1OpBQv/wCzc45Xz6WKOjIDA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:06:52.503382Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.17413","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:03eac6a208dc847269ce7ef86c8ee56bc03a85daf05f3a9ce6a77d9d33a9d619","sha256:9ad7c6428f3595d23440264e38e6cb7d9b273455c1f808ff02183162d4f5685d"],"state_sha256":"af2725f7a84d14c394d9c1caca1750c6ec7d0800ec580d88c1badec63f8aef6a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aAoeKgoRE1OGGJYDlMtUodAuqSVKA1wvh8V2x0K47lwYSMhBimAtx8h02v42J0GGjqB97bLNSCZFMnqg5bKjDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T09:34:37.590282Z","bundle_sha256":"2425b1535bc6ce82b9b28c217f786dc8ce6a7c4f85fc9ba163f2cd8c9fa3fd0b"}}