{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QCSUL3ISKIFNDBLZ37DP6LDTTO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e72d0c0cb91f654d4da33abcbfb735003201f276e9760c3e92bb5f32845f588c","cross_cats_sorted":["cs.CR","cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-01-25T12:20:32Z","title_canon_sha256":"e3c1190eec0ad3524954d74af7eb765c5594a0b886b7cf93addd76abcd2c359a"},"schema_version":"1.0","source":{"id":"2301.10545","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.10545","created_at":"2026-07-05T05:35:52Z"},{"alias_kind":"arxiv_version","alias_value":"2301.10545v1","created_at":"2026-07-05T05:35:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.10545","created_at":"2026-07-05T05:35:52Z"},{"alias_kind":"pith_short_12","alias_value":"QCSUL3ISKIFN","created_at":"2026-07-05T05:35:52Z"},{"alias_kind":"pith_short_16","alias_value":"QCSUL3ISKIFNDBLZ","created_at":"2026-07-05T05:35:52Z"},{"alias_kind":"pith_short_8","alias_value":"QCSUL3IS","created_at":"2026-07-05T05:35:52Z"}],"graph_snapshots":[{"event_id":"sha256:150cb4dfc08846b2334c6ef079c78671287e9de76f8ca26ea69b86af8ede7f23","target":"graph","created_at":"2026-07-05T05:35:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.10545/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Static analysis is a powerful tool for detecting security vulnerabilities and other programming problems. Global taint tracking, in particular, can spot vulnerabilities arising from complicated data flow across multiple functions. However, precisely identifying which flows are problematic is challenging, and sometimes depends on factors beyond the reach of pure program analysis, such as conventions and informal knowledge. For example, learning that a parameter \"name\" of an API function \"locale\" ends up in a file path is surprising and potentially problematic. In contrast, it would be completel","authors_text":"Max Sch\\\"afer, Michael Pradel, Yiu Wai Chow","cross_cats":["cs.CR","cs.PL"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-01-25T12:20:32Z","title":"Beware of the Unexpected: Bimodal Taint Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.10545","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52c42bbe6163bdd321f04e8a9f1327e0dea9af8453ff600eb7fb7e42af700c5b","target":"record","created_at":"2026-07-05T05:35:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e72d0c0cb91f654d4da33abcbfb735003201f276e9760c3e92bb5f32845f588c","cross_cats_sorted":["cs.CR","cs.PL"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2023-01-25T12:20:32Z","title_canon_sha256":"e3c1190eec0ad3524954d74af7eb765c5594a0b886b7cf93addd76abcd2c359a"},"schema_version":"1.0","source":{"id":"2301.10545","kind":"arxiv","version":1}},"canonical_sha256":"80a545ed12520ad18579dfc6ff2c739b835e58c4ab8aa1a91fb427f5b5e39d60","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80a545ed12520ad18579dfc6ff2c739b835e58c4ab8aa1a91fb427f5b5e39d60","first_computed_at":"2026-07-05T05:35:52.095571Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:35:52.095571Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"07lp7pTKS9WVWCVd2ez/8WeSFX+aQC8ZsN6v+Yi+IAa4YLofy3FqKD0FMEZ+7C6LvWdyvFk8Vwl2felsOvTgBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:35:52.096000Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.10545","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52c42bbe6163bdd321f04e8a9f1327e0dea9af8453ff600eb7fb7e42af700c5b","sha256:150cb4dfc08846b2334c6ef079c78671287e9de76f8ca26ea69b86af8ede7f23"],"state_sha256":"6ad18353fbe57c61067e842c5e906a2ad7bffdf2de2266561ab5f60274cbe55f"}