Code Language Models (CLMs) are increasingly adopted for vulnerability detection, yet knowing when to trust their predictions remains an open challenge. Uncertainty estimation has improved reliability in traditional discriminative models, but whether these benefits transfer to the generative paradigm of CLMs is unclear...
Hao-Dong Li, Xiao Cheng, Xu-Dong Wang et al.· Proceedings of the 41st IEEE...· 0 citations
Price manipulation is one of the most damaging vulnerability classes in decentralized finance (DeFi) protocols. Existing approaches mainly stop at warning generation or rely on rigid attack templates, and therefore struggle to determine whether a victim protocol is profitably exploitable under a concrete chain state. T...
Bo-Si Zhang, Ning-Yu He, Guang-Dong Bai et al.· Proceedings of the 41st IEEE...· 0 citations
Push notification services are widely used in mobile apps to deliver time-sensitive content. In the fragmented Android ecosystem, however, no single push service works reliably across all devices and markets, leading developers to integrate multiple push SDKs from device manufacturers and third-party providers. Despite...
Shi-Long Hu, Zi-Kan Dong, Chao Wang et al.· Proceedings of the 41st IEEE...· 0 citations
Static taint analyzers are widely used in software security, yet aggregate vulnerability-detection metrics provide limited insight into the specific language constructs and analysis capabilities that cause tools to succeed or fail. This paper presents xAST, a fine-grained benchmark containing 844 paired capability case...
Yan-Jie Zhao, Shen-Ao Wang, Jian Zhao et al.· ACM Transactions on Software...· 0 citations
This study presents a comprehensive analysis of user reviews for GenAI-powered mobile apps, focusing on identifying both their issues and strengths, and derived 18 key findings that shed light on the rapid growth of GenAI-powered apps across various genres, the common issues leading to user dissatisfaction, and the fea...
Wu-Xia Bai, Yan-Jie Zhao, Kai Chen et al.· ACM Transactions on Software...· 0 citations
HGFuzzer, an automated framework that augments DGF with predicate-guided execution synthesis, and successfully triggered 19 bugs, unearthed 9 previously unknown, CVE-assigned bugs, confirming its efficacy in real-world security auditing.
Hanxiang Xu, Yan-Jie Zhao, Junqing Yu et al.· ACM Transactions on Software...· 0 citations
This work presents the first longitudinal and systematic empirical study of Rust in AOSP, shedding light on its adoption, integration, and governance in a safety-critical mobile platform and provides industry practitioners with an empirical foundation and practical guidance for similar memory-safe migrations in large-s...
JSTestCraft reconstructs missing context via three enrichment agents: library, structural, and semantic via three enrichment agents, demonstrating that context reconstruction and agentic collaboration enable LLMs to perform more reliable and adaptive testing in dynamic JavaScript environments.
