[{"_1":2,"_168":-5,"_169":-5},"loaderData",{"_3":4,"_18":19,"_26":27,"_146":147},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":22,"_24":11,"_25":22},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_28":29,"_30":-5,"_31":11,"_32":11,"_33":34,"_35":36,"_37":-5,"_38":11,"_39":40,"_93":-5,"_94":95,"_134":-5,"_135":11,"_136":22,"_137":11,"_138":11,"_139":-5,"_140":11,"_141":-5,"_142":143,"_144":96,"_145":-7},"canonicalUrl","https://hub.docker.com/r/noblemathews/fuzzslice-icse/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","noblemathews","reponame","fuzzslice-icse","cloudBuildSource","isAutobuildsAvailable","repo",{"_41":42,"_48":49,"_51":52,"_53":54,"_55":11,"_56":57,"_58":59,"_60":61,"_44":36,"_33":34,"_63":64,"_65":50,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":67,"_74":75,"_76":11,"_77":34,"_78":79,"_84":11,"_85":86,"_90":34,"_91":92},"categories",[43],{"_44":45,"_46":47},"name","Security","slug","security","content_types",[50],"image","date_registered","2024-01-12T05:03:06.081098Z","description","Camera Ready version of FuzzSlice v1 code for ICSE","is_private","last_updated","2024-01-22T12:06:25.152927Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[62],"application/vnd.docker.container.image.v1+json","pull_count",1140,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# FuzzSlice\n\n[![SWH](https://archive.softwareheritage.org/badge/origin/https://github.com/NobleMathews/FuzzSliceICSE/)](https://archive.softwareheritage.org/browse/origin/?origin_url=https://github.com/NobleMathews/FuzzSliceICSE)\n\n

\nICSE Replication GitHub Repo •\n ICSE 2024 Paper PDF •\n FuzzSlice Technical Documentation •\n Archival Code Repository •\n ICSE Publication •\n Preprint (ResearchGate) \n

\n\n## Purpose\n\nThis artifact is a full functional and reusable implementation of the approach and results presented in the paper “FuzzSlice: Pruning False Positives in Static Analysis Warnings through Function-Level Fuzzing. The goal of FuzzSlice is to automatically prune false positives in static analysis warnings. FuzzSlice achieves this by compiling code slices at the function level of each static analysis warning. It then proceeds to fuzz these compiled slices using libfuzzer. \n\nList of badges applied for:\n- Artifact Available\n - [Archival Repository (Software Heritage)](https://archive.softwareheritage.org/browse/origin/directory/?origin_url=https://github.com/NobleMathews/FuzzSliceICSE)\n - [![SWH](https://archive.softwareheritage.org/badge/swh:1:rev:2f3287061abe46a436fb6b4422171d171c345567/)](https://archive.softwareheritage.org/swh:1:rev:2f3287061abe46a436fb6b4422171d171c345567;origin=https://github.com/NobleMathews/FuzzSliceICSE;visit=swh:1:snp:1d64e508e0712f6f2bdf5bce07b81c45707a227e)\n - Identifier: swh:1:rev:2f3287061abe46a436fb6b4422171d171c345567;origin=https://github.com/NobleMathews/FuzzSliceICSE;visit=swh:1:snp:1d64e508e0712f6f2bdf5bce07b81c45707a227e\n\n- Artifact Reusable\n - Dockerfile part of Archival Repository\n - [Technical Documentation](FuzzSlice_Technical_Documentation.pdf)\n\n## Provenance\n\nThe package includes the code for artifact and the benchmarks used in the study (Juliet, openssl, openssh-portable and tmux repositories). In this artifact, we have provided a docker file which will automatically setup various modules of our package (therefore docker is the only dependency). The docker can be easily setup on a Linux machine by directly applying the commands on the README of the replication package in order. Therefore, there is no particular technology skills assumed by the reviewer. The expected setup time for the docker is a few minutes. We have already provided sample static analysis warnings to demonstrate FuzzSlice. The expected output is the code coverage of fuzzing and whether a static analysis warning is classified as a possible true bug or false positive. We have also provided a user documentation guide, which will go over the various configuration options of FuzzSlice in detail and explain what they do and what to expect as output.\n\n## Setup\n\nThese instructions will guide you through getting a copy of the tool up and running on your local machine.\n\n### Prerequisites\n\n- Docker\n\n### Recommended Option: Using Pre-built Docker Image\n\nFor a quick start, you can use a pre-built image available on Docker Hub. This is the recommended method, especially if you are using an amd64 architecture system.\n\nTo pull and run the pre-built image, execute the following commands:\n\n```bash\ndocker pull noblemathews/fuzzslice-icse\ndocker run -it noblemathews/fuzzslice-icse\n```\n\nTo enhance result replication across diverse platforms and architectures, we recommend using the pre-built Docker image. This suggestion stems from comprehensive testing we conducted on various systems, including an Apple Silicon-based (M1) machine and an AMD server. Over time, dependencies and packages can become outdated or unavailable. On Apple M1, an open issue hinders the address sanitizer's proper functioning within a containerized environment.\n\nNote that we have tested the pre-built docker on the following platforms and architectures:\n- A Windows and a Linux machine with an amd64 architecture.\n- A Linux machine with an x86_64 architecture.\n\n### Building docker image \n\nHowever, if you would like to build the docker image from scratch, you can follow the instructions below. To verify that dependencies are working correctly please ensure that the 3 sample targets are classified correctly as true bugs or false positives as shown in the next section.\n\n1A. If you are downloading this repository from archival as a compressed file the git submodules will not be included. Please run the following command from the root directory of the project to download the submodules:\n```bash\nchmod +x ./init_submodules.sh\n./init_submodules.sh\n```\n\n1B. Else if you have cloned this repo as a git repository, enter the root directory of the project. Recursively fetch the submodules by running:\n```bash\ngit submodule update --init --recursive\n```\n\nYou can now build the environment required for the tool from using the Dockerfile included by running the following command:\n```bash\ndocker build --platform linux/x86_64 -t sf . \n```\n\nThe build command will both setup the environment and the test repositories. To enter the container invoke:\n```bash\ndocker run -it sf\n```\n\n## Usage\n\n### Replicate Results\n\nTo replicate the results of the paper, you can run the following command from within in the docker container:\n\n```bash\npython3 main.py\n```\n\n**Quoting from the paper:**\nTo evaluate the warnings produced by the static analysis tools, we subject each warning to a fuzzing process lasting `five minutes`. Our fuzzing procedure was conducted on a Headless Server equipped with a powerful hardware configuration consisting of `64 cores of Intel Xeon Gold 6226R processors, operating at a speed of 3.900GHz, and 128GB of RAM on Ubuntu 20.04 LTS`. It is worth noting that certain warning locations may only be compilable on specific operating systems as defined by preprocessor directives.\n\n\n\n**Note:** Running FuzzSlice on all repositories and static analysis warnings will take a long time and compute to run (~3-4 days based on the fuzzing budget). We have setup `config.yaml` to run one of the smaller repositories `tmux` on 3 warnings with a reduced time budget for fuzzing (the rest are commented out and can be enabled by editting `info_lib/tmux/targets.txt`).\n\nThe expected output with the 3 warnings is as follows:\n\n```bash\n| INFO | fuzz:build_report:526 - Number of possible True positives: 2\n| INFO | fuzz:build_report:528 - ./test_lib/tmux/cmd-send-keys.c:110: error: Buffer Overrun L1 // issue\n| INFO | fuzz:build_report:528 - ./test_lib/tmux/cmd-parse.c:1292: error: Buffer Overrun L2\n| INFO | fuzz:build_report:531 - Number of possible False positives: 1\n| INFO | fuzz:build_report:533 - ./test_lib/tmux/layout-custom.c:66: error: Buffer Overrun L1\n```\n\nIf you would like to replicate all the results in the paper you can uncomment any warning within any of the projects in `info_lib//targets.txt` directory. Then in the `config.yaml` file, replace `test_library` attribute with ``. Then run `python3 main.py`. We have reduced the fuzzing time from 5 minutes to 10 seconds in `config.yaml` so that users can see the fuzzing of several warnings at a faster pace (at the cost of accuracy). Even with this reduced configuration building all the projects and covering all warnings in the analysis would take 8 hours of fuzzing and compilation time. Users can increase the fuzzing time to 5 minutes for accurate results by setting the `timeout` attribute in `config.yaml` to 300.\n\n### Running the tool on a custom repo\n\nNow you can clone and setup target repo in testlib. After setting up the repo such that `make` can be run on it. \n\nThe tool also expects a list of targets to work with, though all targets produced from a static analyzer can be used here we have kept this part manual so that the tool is only run on the kind of issues the user wants to check for (say buffer or memory issues). This file should be provided as `infolib/{test_library}/targets.txt`. Each target line should start with `{relative_path}:{line_no}`, this format is used by default in reports generated by tools like `rats` and `infer`. \n\nYou can run the tool on the repo by updating the `config.yaml` file as per your requirements and running the `main.py` script.\n\nThe config keys currently supported are detailed below:\n\n```yaml\ntest_library: Name of the directory within test_lib which has been setup for testing\nfuzz_tool: Use 0 for libfuzzer and 1 for AFL [AFL support has currently been paused please retain this as 0]\ntimeout: The time for which Fuzzer runs\nhard_timeout: Max timeout enforced for the entire fuzzing binaries function [For cases that don't terminate as expected]\nmax_length_fuzz_bytes: Max length of fuzz bytes\nparallel_execution: Allow multiprocessing for issues\ncrash_limit: Maximum number of crashes to check\nbug_timeline_targets_run: Performs git blame based tracing of issues [Retain as false for analysis]\nlog_report: Enable timing each part of the pipeline\n```\n","has_starred","hub_user","immutable_tags_settings",{"_80":11,"_81":82},"enabled","rules",[83],".*","is_automated","permissions",{"_87":22,"_88":11,"_89":11},"read","write","admin","user","storage_size",2576168938,"orgData","recentTags",[96],{"_97":50,"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_56":123,"_124":99,"_125":34,"_126":62,"_44":127,"_128":129,"_130":114,"_131":123,"_132":71,"_133":22},"content_type","creator",20900060,"digest","sha256:48186c50b579aad9325ddd1c6dfa3ba2b40f305ac861f311d45e3c3839abc023","full_size",1119948367,"id",583736001,"images",[108],{"_109":110,"_100":101,"_111":112,"_113":114,"_115":116,"_117":118,"_119":112,"_120":-5,"_121":103,"_68":71,"_122":-5},"architecture","amd64","features","","last_pulled","2026-10-20T00:02:42.846548263Z","last_pushed","2024-01-22T12:06:25Z","os","linux","os_features","os_version","size","variant","2024-01-22T12:06:24.84827Z","last_updater","last_updater_username","media_type","latest","repository",22918429,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_39":148,"_156":157,"_142":166,"_167":11},{"_41":149,"_48":151,"_51":52,"_53":54,"_55":11,"_56":57,"_58":59,"_60":152,"_44":36,"_33":34,"_63":64,"_65":50,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":67,"_74":75,"_76":11,"_77":34,"_78":153,"_84":11,"_85":155,"_90":34,"_91":92},[150],{"_44":45,"_46":47},[50],[62],{"_80":11,"_81":154},[83],{"_87":22,"_88":11,"_89":11},"tags",{"_158":69,"_159":-5,"_160":-5,"_161":162},"count","next","previous","results",[163],{"_97":50,"_98":99,"_100":101,"_102":103,"_104":105,"_106":164,"_56":123,"_124":99,"_125":34,"_126":62,"_44":127,"_128":129,"_130":114,"_131":123,"_132":71,"_133":22},[165],{"_109":110,"_100":101,"_111":112,"_113":114,"_115":116,"_117":118,"_119":112,"_120":-5,"_121":103,"_68":71,"_122":-5},[],"canDeleteTags","actionData","errors"]

noblemathews/fuzzslice-icse

Tags for noblemathews/fuzzslice-icse