Property-Based Fuzzing for Finding Data Manipulation Errors in Android Apps

Jingling Sun, Ting Su, Jiayi Jiang, Jue Wang, G. Pu, Zhendong Su. 2023. ESEC/SIGSOFT FSE.

Read the paper · doi:10.1145/3611643.3616286

What this paper does with SQLancer

One citation in related work, noting that SQLancer's line of work uses metamorphic testing to find CRUD errors in database management systems -- the same class of error, in engines rather than apps. PBFDroid applies property-based fuzzing to data manipulation errors in Android apps -- bugs in the create, read, update and delete operations that handle app-specific data, especially non-crashing logic ones. Given a type of app data it randomly interleaves the relevant operations with other events to explore diverse app states, characterising those functions as data-model-based properties and checking them against the UI. Across 20 real apps it found 30 previously unknown bugs. Written by claude-opus-5 from the 1 place this paper refers to SQLancer. The quotations below are the paper's own words, stored verbatim when the text was extracted.

How it was classified

uses infrastructure — no

SQLancer is cited, not used; nothing in the mentions describes reusing its code.

extends technique — no

No technique is extended; the citation is background.

compares with — no

No empirical comparison against SQLancer is reported in the mentions.

describes as state of the art — no

The citation does not characterise SQLancer as the state of the art.

SQLancer publications it cites (2)

Bibliography entries that resolved to a SQLancer publication, or to a paper by one of the project's authors. A sentence citing one of these numbers is a reference to SQLancer even when it never writes the name.

#	Entry	Matched as
51	Manuel Rigger and Zhendong Su. 2020. Finding bugs in database systems via query partitioning. Proc. ACM Program. Lang. OOPSLA (2020), 211:1–211:30. https://doi.org/10.5281/zenodo.4032401	sqlancer publication · TLP
52	Manuel Rigger and Zhendong Su. 2020. Testing Database Engines via Pivoted Query Synthesis. In 14th USENIX Symposium on Operating Systems Design and Implementation (OSDI). USENIX Association, 667–682. https://doi.org/1...	sqlancer publication · PQS

Every place it refers to SQLancer (1)

1 sentence, each stored verbatim from the extracted text with where it was found and how. “Citation marker” means the sentence names no tool at all and was reached through a reference number that resolved to a SQLancer publication.

Id	Sentence	Found by	Where
M1	Some work [ 51,52] uses metamorphic testing to find the CRUD errors in database management systems.	citation marker background	6 RELATED WORK page 11

This page is rendered from _data/papers/paper_doi_10_1145_3611643_3616286.json, extracted from supplied pdf. 13 pages, 80 references parsed.