Software vulnerability is one of the major threats to software security. Once discovered,
vulnerabilities are often fixed by applying security patches. In that sense, security patches …

With the increasing popularity of open-source software, embedded vulnerabilities have been
widely propagating to downstream software. Due to different maintenance policies, software …

Software developers submit patches to handle tens or even hundreds of bugs reported daily.
However, not all submitted patches can be directly integrated into the code base, since they …

Security patches, embedding both vulnerable code and the corresponding fixes, are of great
significance to vulnerability detection and software maintenance. However, the existing …

Code reviews have been conducted since decades in software projects, with the aim of
improving code quality from many different points of view. During code reviews, developers …

Finding and exploiting vulnerabilities in binary code is a challenging task. The lack of high-
level, semantically rich information about data structures and control constructs makes the …

Software patch generation is a critical phase in the life-cycle of a software vulnerability. The
longer it takes to generate a patch, the higher the risk a vulnerable system needs to take to …

Program Analysis has been a rich and fruitful field of research for many decades, and
countless high quality program analysis tools have been produced by academia. Though …

Security patches in open source software, providing security fixes to identified
vulnerabilities, are crucial in protecting against cyber attacks. Security advisories and …

Despite the effort of software maintainers, patches to open-source repositories are
propagated from the main codebase to all the related projects (eg, forks) with a significant …