GrayC: Greybox Fuzzing of Compilers and Analysers for C

Karine Even-Mendoza, Arindam Sharma, Alastair F. Donaldson, Cristian Cadar. 2023. International Symposium on Software Testing and Analysis.

Read the paper · doi:10.1145/3597926.3598130

What this paper does with SQLancer

Two citations placing SQL among the languages, alongside OpenCL, OpenGL and Verilog, where randomised compiler-style testing has been applied. GrayC brings coverage-directed, mutation-based greybox fuzzing to C compilers and analysers, which have become relatively resistant to the blackbox fuzzers used until now. The difficulty is that naive mutations produce programs that do not compile and so cannot reach deep bugs. GrayC introduces mutations targeting common C constructs and transforms fuzzed programs so they produce meaningful output, enabling differential testing. It found 30 confirmed bugs, 25 previously unknown. Written by claude-opus-5 from the 2 places this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — no

SQLancer is cited, not used; nothing in the mentions describes reusing its code.

extends technique — no

No technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer is reported in the mentions.

describes as state of the art — no

The citation does not characterise SQLancer as the state of the art.

SQLancer publications it cites (1)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#	Entry	Matched as
92	ManuelRiggerandZhendongSu.2020.DetectingOptimizationBugsinDatabase Engines via Non-optimizing Reference Engine Construction. In Proc. of the Joint Meeting of the European Software Engineering Conference and the ACM Sy...	sqlancer publication · NOREC

Every place it refers to SQLancer (2)

2 sentences, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id	Sentence	Found by	Where
M1	3598130 1 INTRODUCTION Over the last decade or so, randomised compiler testing, often termedcompiler fuzzing, has seen an explosion of interest, with compilerfuzzersleadingtotheﬁndingand ﬁxingof thousandsof bugs in C compilers such as Clang/ LLVMandGCC[65,82,105], aswell asincompilers forother languagessuchasOpenCL[...	citation marker background	page 1
M2	[ 65,82,105]), but also on other languages such as OpenCL [ 67], OpenGL [ 17], SQL [92] and Verilog [57].	citation marker background	5.4 Bug Finding page 10

This page is rendered from _data/papers/paper_doi_10_1145_3597926_3598130.json, extracted from supplied pdf. 13 pages, 107 references parsed.