Research on Coverage Statistics in Fuzz Testing of Closed-Source DBMS

Zhongjie Li, Hao-Tian Liang, Haoyang Jia, Qingxian Wang, Yan Cao. 2025. 2025 International Conference on Computer Science, Technology and Engineering (ICCSTE).

Read the paper · doi:10.1109/iccste65902.2025.11138310

What this paper does with SQLancer

SQLancer is cited once, in the introduction's survey of DBMS testing: it and Troc are described as employing pre-established oracles to detect logic and transaction isolation errors. That framing is what the paper contrasts with its own concern, which is measuring coverage rather than deciding correctness. This paper addresses coverage measurement when fuzzing closed-source DBMSs, where the instrumentation that coverage-guided fuzzing depends on cannot be inserted because the source is unavailable. Written by claude-opus-5 from the 1 place this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — no

SQLancer is cited as related work; no reuse of its code, generator or workload is described.

extends technique — no

No SQLancer technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer or one of its oracles is reported.

describes as state of the art — no

The text does not describe SQLancer as the state of the art.

SQLancer publications it cites (2)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#	Entry	Matched as
4	Rigger, M., Su, Z. D., & Assoc, U. (2020). Testing Database Engines via Pivoted Query Synthesis. 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI), 667-682. Retrieved from ://WOS:0...	sqlancer publication · PQS
17	Ba, J. S., Rigger, M., & Ieee. (2023). Testing Data base Engines via Query Plan Guidance. 45th IEEE/ACM International Co nference on Software Engineering (ICSE), 2060-2071. https://doi.org/10.1109/icse48619.2023.00174.	sqlancer publication · QPG

Every place it refers to SQLancer (1)

1 sentence, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id	Sentence	Found by	Where
M1	SQLancer [4] and Troc [5] employ pre-established oracles to detect logical and trans action isolation errors in DBMSs.	name definition	I INTRODUCTION page 1

This page is rendered from _data/papers/paper_doi_10_1109_iccste65902_2025_11138310.json, extracted from supplied pdf. 7 pages, 18 references parsed.