{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KV5LJPJ7N5QJPFHWMJQEWX4P5I","short_pith_number":"pith:KV5LJPJ7","canonical_record":{"source":{"id":"2501.04312","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-01-08T07:07:22Z","cross_cats_sorted":[],"title_canon_sha256":"fbed1a42ad70f902cae20cc40c4a15c2cb77edb7a8b8332f433c1199d53ffc95","abstract_canon_sha256":"36fb11996cdf0f9265006987cb2b0e31fff93d8e97b599146aa435f1e898934d"},"schema_version":"1.0"},"canonical_sha256":"557ab4bd3f6f609794f662604b5f8fea37e31a1089137328eccb19038162b370","source":{"kind":"arxiv","id":"2501.04312","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.04312","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"arxiv_version","alias_value":"2501.04312v1","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.04312","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_12","alias_value":"KV5LJPJ7N5QJ","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_16","alias_value":"KV5LJPJ7N5QJPFHW","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_8","alias_value":"KV5LJPJ7","created_at":"2026-07-05T09:58:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KV5LJPJ7N5QJPFHWMJQEWX4P5I","target":"record","payload":{"canonical_record":{"source":{"id":"2501.04312","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-01-08T07:07:22Z","cross_cats_sorted":[],"title_canon_sha256":"fbed1a42ad70f902cae20cc40c4a15c2cb77edb7a8b8332f433c1199d53ffc95","abstract_canon_sha256":"36fb11996cdf0f9265006987cb2b0e31fff93d8e97b599146aa435f1e898934d"},"schema_version":"1.0"},"canonical_sha256":"557ab4bd3f6f609794f662604b5f8fea37e31a1089137328eccb19038162b370","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:58:33.187653Z","signature_b64":"yhdD7mfY0AEKQin+6VH9YyJCSCzwyQJVAKHwRPyvtCTjQNfgyDW1W31T+Owk4A/t8FMq5XlzDxL9V7FhexYuBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"557ab4bd3f6f609794f662604b5f8fea37e31a1089137328eccb19038162b370","last_reissued_at":"2026-07-05T09:58:33.187233Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:58:33.187233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.04312","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:58:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Uzy10juhB4HuDtpLSwAQDbIE/dl3t+mLemCvONrp1Llh4ntBvt5VapyHnVewvadLNbor1VXRfp6/t01CdZ6CCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:14:13.103039Z"},"content_sha256":"21960217b7802c26849e263bb02981b143985d8c696e53c05982fdb259e62b62","schema_version":"1.0","event_id":"sha256:21960217b7802c26849e263bb02981b143985d8c696e53c05982fdb259e62b62"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KV5LJPJ7N5QJPFHWMJQEWX4P5I","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Jitao Han, Kunpeng Zhang, Shaohua Wang, Sheng Wen, Shuai Wang, Xian Li, Xiaogang Zhu","submitted_at":"2025-01-08T07:07:22Z","abstract_excerpt":"Deep learning (DL) libraries, widely used in AI applications, often contain vulnerabilities like buffer overflows and use-after-free errors. Traditional fuzzing struggles with the complexity and API diversity of DL libraries such as TensorFlow and PyTorch, which feature over 1,000 APIs. Testing all these APIs is challenging due to complex inputs and varied usage patterns. While large language models (LLMs) show promise in code understanding and generation, existing LLM-based fuzzers lack deep knowledge of API edge cases and struggle with test input generation. To address this, we propose DFUZZ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.04312","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.04312/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:58:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4YHboX60FV/kuvmnTCniEUHCHOkdeoIRkBFDGOnqHoFDV+++tb2GkLdKo2E88Lqi8S+c59Lk5+Ba6QT14Kn3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T09:14:13.103745Z"},"content_sha256":"74817f8e9673500c2bc92f73f8e3ef33ef2e141922061321f46ba41f305046e1","schema_version":"1.0","event_id":"sha256:74817f8e9673500c2bc92f73f8e3ef33ef2e141922061321f46ba41f305046e1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/bundle.json","state_url":"https://pith.science/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T09:14:13Z","links":{"resolver":"https://pith.science/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I","bundle":"https://pith.science/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/bundle.json","state":"https://pith.science/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KV5LJPJ7N5QJPFHWMJQEWX4P5I/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KV5LJPJ7N5QJPFHWMJQEWX4P5I","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36fb11996cdf0f9265006987cb2b0e31fff93d8e97b599146aa435f1e898934d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-01-08T07:07:22Z","title_canon_sha256":"fbed1a42ad70f902cae20cc40c4a15c2cb77edb7a8b8332f433c1199d53ffc95"},"schema_version":"1.0","source":{"id":"2501.04312","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.04312","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"arxiv_version","alias_value":"2501.04312v1","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.04312","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_12","alias_value":"KV5LJPJ7N5QJ","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_16","alias_value":"KV5LJPJ7N5QJPFHW","created_at":"2026-07-05T09:58:33Z"},{"alias_kind":"pith_short_8","alias_value":"KV5LJPJ7","created_at":"2026-07-05T09:58:33Z"}],"graph_snapshots":[{"event_id":"sha256:74817f8e9673500c2bc92f73f8e3ef33ef2e141922061321f46ba41f305046e1","target":"graph","created_at":"2026-07-05T09:58:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.04312/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning (DL) libraries, widely used in AI applications, often contain vulnerabilities like buffer overflows and use-after-free errors. Traditional fuzzing struggles with the complexity and API diversity of DL libraries such as TensorFlow and PyTorch, which feature over 1,000 APIs. Testing all these APIs is challenging due to complex inputs and varied usage patterns. While large language models (LLMs) show promise in code understanding and generation, existing LLM-based fuzzers lack deep knowledge of API edge cases and struggle with test input generation. To address this, we propose DFUZZ","authors_text":"Jitao Han, Kunpeng Zhang, Shaohua Wang, Sheng Wen, Shuai Wang, Xian Li, Xiaogang Zhu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-01-08T07:07:22Z","title":"Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.04312","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21960217b7802c26849e263bb02981b143985d8c696e53c05982fdb259e62b62","target":"record","created_at":"2026-07-05T09:58:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36fb11996cdf0f9265006987cb2b0e31fff93d8e97b599146aa435f1e898934d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-01-08T07:07:22Z","title_canon_sha256":"fbed1a42ad70f902cae20cc40c4a15c2cb77edb7a8b8332f433c1199d53ffc95"},"schema_version":"1.0","source":{"id":"2501.04312","kind":"arxiv","version":1}},"canonical_sha256":"557ab4bd3f6f609794f662604b5f8fea37e31a1089137328eccb19038162b370","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"557ab4bd3f6f609794f662604b5f8fea37e31a1089137328eccb19038162b370","first_computed_at":"2026-07-05T09:58:33.187233Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:58:33.187233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yhdD7mfY0AEKQin+6VH9YyJCSCzwyQJVAKHwRPyvtCTjQNfgyDW1W31T+Owk4A/t8FMq5XlzDxL9V7FhexYuBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:58:33.187653Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.04312","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21960217b7802c26849e263bb02981b143985d8c696e53c05982fdb259e62b62","sha256:74817f8e9673500c2bc92f73f8e3ef33ef2e141922061321f46ba41f305046e1"],"state_sha256":"d0bd7484285f5168e70211a31ae7c219fae0db39fe40732a52d396ab23a50825"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UW4wh7gF/GWili/WhISJnp6ulZ7cu6p8I5RcxgBvPHxnG8zh56GPqGMIqMaiZfkSFBUEeyR805nvOdiL2E+uCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T09:14:13.109433Z","bundle_sha256":"efabf412a81c7131580a665a7debc2381ada203a414686b03fce4c83e6a43575"}}