← Research building on SQLancer

Zhe Wang, Liang Liu, Ning Wang. 2024. 2024 6th International Academic Exchange Conference on Science and Technology Innovation (IAECST).

Read the paper · doi:10.1109/iaecst64597.2024.11117732

What this paper does with SQLancer

The system is built inside SQLancer: the paper states it was implemented within SQLancer, and that its query generation draws on SQLancer's design principles with modifications. NoREC and query partitioning are described as the prior techniques it extends the reach of. The sentence establishing this is letter-spaced in the PDF's text layer, so it reads as separated characters; the words are intact. This paper fuzzes a DBMS against itself by running several instances of the same system with different components and configurations -- an 'isomerism system' -- so differential testing becomes possible without a second, separate DBMS. The authors argue that growing architectural complexity limits the effectiveness and coverage of conventional DBMS fuzzing. Testing popular DBMSs this way they discovered 10 previously unknown types of bug. Written by claude-opus-5 from the 6 places this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — yes (implementation)

M1 states the system was implemented within SQLancer, and M4 that the query generation draws on SQLancer's design principles with certain modifications. M1's characters are separated by spaces in the PDF's text layer, which is damage to the rendering rather than to the words.

The paper sets this passage with letter-spacing, so extraction returns it one character at a time and there is no readable form to quote. M1 · page 1
The query generation approach draws on the design principles of SQLancer [16], with certain modifications. M4 · page 3

extends technique — no

No technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer is reported in the mentions.

describes as state of the art — no

The citation does not characterise SQLancer as the state of the art.

SQLancer publications it cites (3)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#EntryMatched as
13 Rigger, M., Su, Z. (2020) Detecting Optimization Bugs in Database Engines via Non-Optimizing Reference Engine Construction. In: Proceedings of the ACM Joint Meeting on European Software Engineering Conference and Symp... sqlancer publication · NOREC
14 Rigger, M., Su, Z. (2020) Finding Bugs in Database Systems via Query Partitioning. Proceedings of the ACM on Programming Languages, 4(OOPSLA): 1–30. sqlancer publication · TLP
16 Rigger, M., Su, Z. (2020) Testing Database Management Systems via Pivoted Query Synthesis. In: Proceedings of the 41st ACMSIGPLAN Conference on Programming Language Design and Implementation (PLDI). London. pp. 733–74... sqlancer publication

Every place it refers to SQLancer (6)

6 sentences, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id Sentence Found by Where
M1 The paper sets this passage with letter-spacing, which extraction cannot undo — the sentence is there, but no readable form of it is. name
reuse implementation 		page 1
M2 [13] proposed the Non-Optimized Reference Engine Construction (NoREC), aimed at detecting optimization bugs in DBMSs by comparing optimized and non-optimized query s. technique
definition 		page 2
M3 [14] they proposed a query partitioning differential detection method. technique
definition 		page 2
M4 The query generation approach draws on the design principles of SQLancer [16], with certain modifications. name
reuse component 		page 3
M5 In addition, SQLancer supports not only basic query generation but also more advanced nested queries (such as subqueries) and union queries (such as UNION). name
background 		page 3
M6 CONCLUSION This paper proposes a novel fuzz system for DBMS, offering a new perspective and approach for differential testing, and implements the system in SQLancer. name
background 		page 5

This page is rendered from _data/papers/paper_doi_10_1109_iaecst64597_2024_11117732.json, extracted from supplied pdf. 5 pages, 16 references parsed.