Pith Number

pith:QDEQBASN

pith:2026:QDEQBASN3CLQT4BRKNK5AJZADK

not attested not anchored not stored refs pending

Finding Memory Leaks in C/C++ Programs via Neuro-Symbolic Augmented Static Analysis

Bo Wang, David Lo, Huihui Huang, Jieke Shi, Zhou Yang

MemHint augments static analyzers with LLMs and Z3 to detect 52 memory leaks in 3.4 million lines of C/C++ code.

arxiv:2603.27224 v4 · 2026-03-28 · cs.SE · cs.CR

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?

Add to your LaTeX paper

\usepackage{pith}
\pithnumber{QDEQBASN3CLQT4BRKNK5AJZADK}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp

2 Internet Archive

3 Author claim open · sign in to claim

4 Citations open

5 Replications open

✓ Portable graph bundle live · download bundle · merged state

The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Claims

C1strongest claim

On seven real-world C/C++ projects totaling over 3.4M lines of code, MemHint detects 52 unique memory leaks (49 confirmed/fixed, 4 CVEs submitted) at approximately $1.7 per detected bug, compared to 19 by vanilla CodeQL and 3 by vanilla Infer.

C2weakest assumption

The LLM produces accurate classifications of custom memory functions and ownership semantics, and Z3 correctly identifies feasible versus infeasible paths without missing real leaks or introducing excessive false negatives.

C3one line summary

MemHint combines LLM classification of custom memory functions with Z3 path validation to augment CodeQL and Infer, detecting 52 memory leaks (49 confirmed) across 3.4M LOC versus 19 and 3 by vanilla tools.

Receipt and verification

First computed	2026-06-02T02:04:16.760094Z
Builder	pith-number-builder-2026-05-17-v1
Signature	Pith Ed25519 (`pith-v1-2026-05`) · public key
Schema	pith-number/v1.0

Canonical hash

80c900824dd89709f0315355d027201ab19e80e503c97f7001bda5929611ea53

Aliases

arxiv: 2603.27224 · arxiv_version: 2603.27224v4 · doi: 10.48550/arxiv.2603.27224 · pith_short_12: QDEQBASN3CLQ · pith_short_16: QDEQBASN3CLQT4BR · pith_short_8: QDEQBASN

Agent API

Resolver JSON Graph JSON Events JSON Schema Signing key

Verify this Pith Number yourself

curl -sH 'Accept: application/ld+json' https://pith.science/pith/QDEQBASN3CLQT4BRKNK5AJZADK \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 80c900824dd89709f0315355d027201ab19e80e503c97f7001bda5929611ea53

Canonical record JSON

{
  "metadata": {
    "abstract_canon_sha256": "7206cb59c333ac9fe0adb7131cee5bd1d9dc5b3e01ad84c15a3916d29310012a",
    "cross_cats_sorted": [
      "cs.CR"
    ],
    "license": "http://creativecommons.org/licenses/by-nc-sa/4.0/",
    "primary_cat": "cs.SE",
    "submitted_at": "2026-03-28T10:31:58Z",
    "title_canon_sha256": "6e354fc31bb312ef46e314d1d4aa6ca8977c945c03b4ac7d9fa25268e5f0c598"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2603.27224",
    "kind": "arxiv",
    "version": 4
  }
}