{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:22:37Z","timestamp":1784182957732,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":44,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,17]],"date-time":"2024-04-17T00:00:00Z","timestamp":1713312000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,27]]},"DOI":"10.1145\/3617232.3624874","type":"proceedings-article","created":{"date-parts":[[2024,4,17]],"date-time":"2024-04-17T20:10:56Z","timestamp":1713384656000},"page":"435-449","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["UBFuzz: Finding Bugs in Sanitizer Implementations"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7556-3615","authenticated-orcid":false,"given":"Shaohua","family":"Li","sequence":"first","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2970-1391","authenticated-orcid":false,"given":"Zhendong","family":"Su","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,4,17]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Memory. In Proceedings of the 2011 International Symposium on Code Generation and Optimization (CGO'11)","author":"Bruening Derek","year":"2011","unstructured":"Derek Bruening and Qin Zhao. 2011. Practical memory checking with Dr. Memory. In Proceedings of the 2011 International Symposium on Code Generation and Optimization (CGO'11). IEEE, 213--223."},{"key":"e_1_3_2_1_2_1","unstructured":"JTC1\/SC22\/WG14 The C Standards Committee. 2018. ISO\/IEC 9899:2018 Programming languages --- C. https:\/\/www.open-std.org\/jtc1\/sc22\/wg14\/www\/docs\/n2310.pdf."},{"key":"e_1_3_2_1_3_1","volume-title":"A Tool for Static C\/C++ Code Analysis. Retrieved","author":"CppCheck","year":"2023","unstructured":"CppCheck developers. 2023. A Tool for Static C\/C++ Code Analysis. Retrieved March 7, 2023 from http:\/\/cppcheck.sourceforge.net\/"},{"key":"e_1_3_2_1_4_1","volume-title":"OSS-fuzz - continuous fuzzing of open source software. https:\/\/github.com\/google\/oss-fuzz. Accessed","author":"Google","year":"2023","unstructured":"Google developers. 2017. OSS-fuzz - continuous fuzzing of open source software. https:\/\/github.com\/google\/oss-fuzz. Accessed: March 7, 2023."},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/clang.llvm.org\/docs\/UndefinedBehaviorSanitizer.html. Accessed","author":"UndefinedBehaviorSanitizer LLVM","year":"2023","unstructured":"LLVM developers. 2023. UndefinedBehaviorSanitizer. https:\/\/clang.llvm.org\/docs\/UndefinedBehaviorSanitizer.html. Accessed: March 7, 2023."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR52588.2021.00026"},{"key":"e_1_3_2_1_7_1","unstructured":"GCC. 2022. Bug Report. https:\/\/gcc.gnu.org\/bugzilla\/show_bug.cgi?id=106558."},{"key":"e_1_3_2_1_8_1","unstructured":"GCC. 2022. Bug report. https:\/\/gcc.gnu.org\/bugzilla\/show_bug.cgi?id=108085."},{"key":"e_1_3_2_1_9_1","unstructured":"GCC. 2023. Bug report. https:\/\/gcc.gnu.org\/bugzilla\/show_bug.cgi?id=109151."},{"key":"e_1_3_2_1_10_1","volume-title":"Erik Van Der Kouwe, and Klaus von Gleissenthall","author":"Isemann Raphael","year":"2023","unstructured":"Raphael Isemann, Cristiano Giuffrida, Herbert Bos, Erik Van Der Kouwe, and Klaus von Gleissenthall. 2023. Don't Look UB: Exposing Sanitizer-Eliding Compiler Optimizations. In To appear at the 44th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI'23). 1--21."},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 2020 USENIX Annual Technical Conference (USENIX ATC'20). 249--263","author":"Jeon Yuseok","year":"2020","unstructured":"Yuseok Jeon, WookHyun Han, Nathan Burow, and Mathias Payer. 2020. FuZZan: Efficient Sanitizer Metadata Design for Fuzzing.. In Proceedings of the 2020 USENIX Annual Technical Conference (USENIX ATC'20). 249--263."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594334"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2814270.2814319"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_19"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3586027"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3582016.3582053"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3386020"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3428264"},{"key":"e_1_3_2_1_19_1","unstructured":"LLVM. 2022. Bug report. https:\/\/github.com\/llvm\/llvm-project\/issues\/55189."},{"key":"e_1_3_2_1_20_1","unstructured":"LLVM. 2023. Bug report. https:\/\/github.com\/llvm\/llvm-project\/issues\/60236."},{"key":"e_1_3_2_1_21_1","unstructured":"LLVM. 2023. Bug report. https:\/\/github.com\/llvm\/llvm-project\/issues\/61982."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"e_1_3_2_1_23_1","volume-title":"A Tool to Detect Bugs in Java and C\/C++\/Objective-c Code. Retrieved","year":"2023","unstructured":"Meta. 2023. A Tool to Detect Bugs in Java and C\/C++\/Objective-c Code. Retrieved March 7, 2023 from https:\/\/fbinfer.com\/"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484787"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"e_1_3_2_1_26_1","unstructured":"NIST. 2017. Juliet Test Suite for C\/C++ 1.3. https:\/\/samate.nist.gov\/SARD\/test-suites\/112."},{"key":"e_1_3_2_1_27_1","volume-title":"CWE-469: Use of Pointer Subtraction to Determine Size. https:\/\/cwe.mitre.org\/data\/definitions\/469.html. Accessed","author":"NIST.","year":"2023","unstructured":"NIST. 2023. CWE-469: Use of Pointer Subtraction to Determine Size. https:\/\/cwe.mitre.org\/data\/definitions\/469.html. Accessed: March 7, 2023."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2018.00026"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev.2016.043"},{"key":"e_1_3_2_1_30_1","unstructured":"Kostya Serebryany. 2016. Sanitize fuzz and harden your C++ code."},{"key":"e_1_3_2_1_31_1","volume-title":"Proceedings of the 2012 USENIX Annual Technical Conference (USENIX ATC'12). 309--318","author":"Serebryany Konstantin","year":"2012","unstructured":"Konstantin Serebryany, Derek Bruening, Alexander Potapenko, and Dmitriy Vyukov. 2012. AddressSanitizer: A Fast Address Sanity Checker. In Proceedings of the 2012 USENIX Annual Technical Conference (USENIX ATC'12). 309--318."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2015.7054186"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2983990.2984038"},{"key":"e_1_3_2_1_34_1","volume-title":"CWE: Weaknesses in Software Written in C. https:\/\/cwe.mitre.org\/data\/definitions\/658.html.","author":"Content Team CWE","year":"2008","unstructured":"CWE Content Team. 2008. CWE: Weaknesses in Software Written in C. https:\/\/cwe.mitre.org\/data\/definitions\/658.html."},{"key":"e_1_3_2_1_35_1","unstructured":"The Clang Team. 2023. LibTooling. https:\/\/clang.llvm.org\/docs\/LibTooling.html."},{"key":"e_1_3_2_1_36_1","unstructured":"The LLDB Team. 2023. The LLDB Debugger. https:\/\/lldb.llvm.org\/."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507764"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.58"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3575693.3575740"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2349896.2349905"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522728"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993532"},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI'21)","author":"Zhang Jiang","year":"2021","unstructured":"Jiang Zhang, Shuai Wang, Manuel Rigger, Pinjia He, and Zhendong Su. 2021. SANRAZOR: Reducing Redundant Sanitizer Checks in C\/C++ Programs.. In Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI'21). 479--494."},{"key":"e_1_3_2_1_44_1","volume-title":"Proceedings of the 31st USENIX Security Symposium (USENIX Security'22)","author":"Zhang Yuchen","year":"2022","unstructured":"Yuchen Zhang, Chengbin Pang, Georgios Portokalidis, Nikos Triandopoulos, and Jun Xu. 2022. Debloating Address Sanitizer. In Proceedings of the 31st USENIX Security Symposium (USENIX Security'22). 4345--4363."}],"event":{"name":"ASPLOS '24: 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 1","location":"La Jolla CA USA","acronym":"ASPLOS '24","sponsor":["SIGARCH ACM Special Interest Group on Computer Architecture","SIGOPS ACM Special Interest Group on Operating Systems","SIGPLAN ACM Special Interest Group on Programming Languages","SIGBED ACM Special Interest Group on Embedded Systems"]},"container-title":["Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 1"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3617232.3624874","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3617232.3624874","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:46:14Z","timestamp":1750178774000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3617232.3624874"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,17]]},"references-count":44,"alternative-id":["10.1145\/3617232.3624874","10.1145\/3617232"],"URL":"https:\/\/doi.org\/10.1145\/3617232.3624874","relation":{},"subject":[],"published":{"date-parts":[[2024,4,17]]},"assertion":[{"value":"2024-04-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}