{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T02:39:21Z","timestamp":1783564761267,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T00:00:00Z","timestamp":1726012800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Defense Advanced Research Projects Agency","award":["HR0011-19-C-0073"],"award-info":[{"award-number":["HR0011-19-C-0073"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,9,11]]},"DOI":"10.1145\/3650212.3685313","type":"proceedings-article","created":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T11:44:25Z","timestamp":1726055065000},"page":"1841-1845","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["PolyTracker: Whole-Input Dynamic Information Flow Tracing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6246-1422","authenticated-orcid":false,"given":"Evan","family":"Sultanik","sequence":"first","affiliation":[{"name":"Trail of Bits, Philadelphia, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4058-8613","authenticated-orcid":false,"given":"Marek","family":"Surovi\u010d","sequence":"additional","affiliation":[{"name":"Trail of Bits, Brno, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2919-6995","authenticated-orcid":false,"given":"Henrik","family":"Brodin","sequence":"additional","affiliation":[{"name":"Trail of Bits, Stockholm, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1479-7069","authenticated-orcid":false,"given":"Kelly","family":"Kaoudis","sequence":"additional","affiliation":[{"name":"Trail of Bits, Boulder, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1650-1421","authenticated-orcid":false,"given":"Facundo","family":"Tuesca","sequence":"additional","affiliation":[{"name":"Trail of Bits, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-3793-881X","authenticated-orcid":false,"given":"Carson","family":"Harmon","sequence":"additional","affiliation":[{"name":"Trail of Bits, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0156-6765","authenticated-orcid":false,"given":"Lisa","family":"Overall","sequence":"additional","affiliation":[{"name":"Trail of Bits, Washington, DC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-3691-3837","authenticated-orcid":false,"given":"Joseph","family":"Sweeney","sequence":"additional","affiliation":[{"name":"Trail of Bits, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9452-0673","authenticated-orcid":false,"given":"Bradford","family":"Larsen","sequence":"additional","affiliation":[{"name":"Trail of Bits, Groton, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,9,11]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"2023","volume":"202","author":"Aarons Simon","unstructured":"Simon Aarons and David Buchanan. 2023. CVE-2023-21036. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-21036","journal-title":"David Buchanan."},{"key":"e_1_3_2_1_2_1","volume-title":"Abusing file formats","author":"Albertini Ange","year":"2015","unstructured":"Ange Albertini. 2015. Abusing file formats; or, Corkami, the Novella. The International Journal of Proof of Concept or GTFO, 0x07, 6 (2015), March, 18\u201341."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/1247360.1247401"},{"key":"e_1_3_2_1_4_1","unstructured":"Henrik Brodin. 2023. #528: Missing support for YCbCr601. https:\/\/github.com\/mdaus\/nitro\/issues\/528"},{"key":"e_1_3_2_1_5_1","unstructured":"Henrik Brodin. 2023. How to avoid the aCropalypse. https:\/\/blog.trailofbits.com\/2023\/03\/30\/acropalypse-polytracker-blind-spots\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW59333.2023.00021"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"e_1_3_2_1_8_1","unstructured":"LLVM Contributors. 2020. DataFlowSanitizer. https:\/\/clang.llvm.org\/docs\/DataFlowSanitizer.html Accessed: 2020-07-26"},{"key":"e_1_3_2_1_9_1","unstructured":"LLVM Contributors. 2021. [DFSan] Change shadow and origin memory layouts to match MSan.. LLVM commit 45f6d5522f8d . https:\/\/reviews.llvm.org\/D104896?id=354633 Accessed: 2020-07-26"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","unstructured":"Douglas Crockford. 2006. The application\/json Media Type for JavaScript Object Notation (JSON). RFC 4627. https:\/\/doi.org\/10.17487\/RFC4627 10.17487\/RFC4627","DOI":"10.17487\/RFC4627"},{"key":"e_1_3_2_1_11_1","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID","author":"Davanian Ali","year":"2019","unstructured":"Ali Davanian, Zhenxiao Qi, Yu Qu, and Heng Yin. 2019. DECAF++: Elastic Whole-System Dynamic Taint Analysis. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019). USENIX Association, Chaoyang District, Beijing. 31\u201345. isbn:978-1-939133-07-6"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2843859.2843867"},{"key":"e_1_3_2_1_13_1","unstructured":"Standard ECMA-404. 2017. The JSON Data Interchange Format. https:\/\/ecma-international.org\/publications-and-standards\/standards\/ecma-404\/"},{"key":"e_1_3_2_1_14_1","volume-title":"14th USENIX Workshop on Offensive Technologies (WOOT 20)","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Dominik Maier, Heiko Ei\u00df feldt, and Marc Heuse. 2020. afl++: Combining incremental steps of fuzzing research. In 14th USENIX Workshop on Offensive Technologies (WOOT 20)."},{"key":"e_1_3_2_1_15_1","unstructured":"Galois. 2023. Format Analysis Workbench (FAW). https:\/\/github.com\/galoisinc\/faw"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the Sixth Workshop on Language-Theoretic Security at IEEE Security and Privacy.","author":"Harmon Carson","unstructured":"Carson Harmon, Bradford Larsen, and Evan A. Sultanik. 2020. Toward Automated Grammar Extraction via Semantic Labeling of Parser Implementations. In Proceedings of the Sixth Workshop on Language-Theoretic Security at IEEE Security and Privacy."},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the Eighth Workshop on Language-Theoretic Security at IEEE Security and Privacy.","author":"Kaoudis Kelly","unstructured":"Kelly Kaoudis, Henrik Brodin, and Evan A. Sultanik. 2023. Automatically Detecting Variability Bugs Through Hybrid Control and Data Flow Analysis. In Proceedings of the Eighth Workshop on Language-Theoretic Security at IEEE Security and Privacy."},{"key":"e_1_3_2_1_18_1","unstructured":"Ahmed Karaman. 2020. Measuring QEMU Emulation Efficiency. https:\/\/ahmedkrmn.github.io\/TCG-Continuous-Benchmarking\/Measuring-QEMU-Emulation-Efficiency\/ Accessed: 2020-07-26"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2151024.2151042"},{"key":"e_1_3_2_1_20_1","unstructured":"W. M. Khoo. 2020. Taintgrind: a Valgrind taint analysis tool. https:\/\/github.com\/wmkhoo\/taintgrind\/releases\/tag\/v3.14.0"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNIDC.2014.7000307"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"Falcon Momot Sergey Bratus Sven M Hallberg and Meredith L Patterson. 2016. The seven turrets of babel: A taxonomy of langsec errors and how to expunge them. In 2016 IEEE Cybersecurity Development (SecDev). 45\u201352.","DOI":"10.1109\/SecDev.2016.019"},{"key":"e_1_3_2_1_23_1","unstructured":"J. Daniel Smith. 2022. NITRO. NITRO (NITFio \"R\" is a ligature for \"Fi\") is a full-fledged extensible library solution for reading and writing the National Imagery Transmission Format (NITF) a U.S. DoD standard format. Available from https:\/\/github.com\/mdaus\/nitro\/releases\/tag\/NITRO-2.11.2"},{"key":"e_1_3_2_1_24_1","volume-title":"WLLVM: Whole Program LLVM in Go.  https:\/\/github.com\/SRI-CSL\/gllvm\/releases\/tag\/v1.3.1","author":"International SRI","year":"2022","unstructured":"SRI International. 2022. WLLVM: Whole Program LLVM in Go. https:\/\/github.com\/SRI-CSL\/gllvm\/releases\/tag\/v1.3.1"},{"key":"e_1_3_2_1_25_1","volume-title":"Blight: A framework for instrumenting build tools.  https:\/\/github.com\/trailofbits\/blight\/releases\/tag\/v0.0.53","author":"Woodruff William","year":"2023","unstructured":"William Woodruff. 2023. Blight: A framework for instrumenting build tools. https:\/\/github.com\/trailofbits\/blight\/releases\/tag\/v0.0.53"}],"event":{"name":"ISSTA '24: 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Vienna Austria","acronym":"ISSTA '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3685313","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3650212.3685313","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:58:09Z","timestamp":1750294689000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3650212.3685313"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,11]]},"references-count":25,"alternative-id":["10.1145\/3650212.3685313","10.1145\/3650212"],"URL":"https:\/\/doi.org\/10.1145\/3650212.3685313","relation":{},"subject":[],"published":{"date-parts":[[2024,9,11]]},"assertion":[{"value":"2024-09-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}