{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:14:07Z","timestamp":1783008847448,"version":"3.54.5"},"reference-count":66,"publisher":"Association for Computing Machinery (ACM)","issue":"FSE","funder":[{"name":"National Natural Science Foundation of China","award":["Grant No. 62332005 and 62372114"],"award-info":[{"award-number":["Grant No. 62332005 and 62372114"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2025,6,19]]},"abstract":"<jats:p>Branching repositories facilitates efficient software development but can also inadvertently propagate vulnerabilities. When an original branch is patched, other unfixed branches remain vulnerable unless the patch is successfully ported. However, due to inherent discrepancies between branches, many patches cannot be directly applied and require manual intervention, which is time-consuming and leads to delays in patch porting, increasing vulnerability risks. Existing automated patch porting approaches are prone to errors, as they often overlook essential semantic and syntactic context of vulnerability and fail to detect or refine faulty patches.\n \n \n \n \n \n \n \nWe propose Mystique, a novel LLM-based approach to address these limitations. Mystique first slices the semantic-related statements linked to the vulnerability while ensuring syntactic correctness, allowing it to extract the signatures for both the original patched function and the target vulnerable function. Mystique then utilizes a fine-tuned LLM to generate a fixed function, which is further iteratively checked and refined to ensure successful porting. Our evaluation shows that Mystique achieved a success rate of 0.954 at function level and of 0.924 at CVE level, outperforming state-of-the-art approaches by at least 13.2% at function level and 12.3% at CVE level. Our evaluation also demonstrates Mystique\u2019s superior generality across various projects, bugs, and programming languages. Mystique successfully ported patches for 34 real-world vulnerable branches.<\/jats:p>","DOI":"10.1145\/3715718","type":"journal-article","created":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T15:16:02Z","timestamp":1750346162000},"page":"130-152","source":"Crossref","is-referenced-by-count":7,"title":["Mystique: Automated Vulnerability Patch Porting with Semantic and Syntactic-Enhanced LLM"],"prefix":"10.1145","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-2169-7032","authenticated-orcid":false,"given":"Susheng","family":"Wu","sequence":"first","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8404-4794","authenticated-orcid":false,"given":"Ruisi","family":"Wang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-6101-8270","authenticated-orcid":false,"given":"Yiheng","family":"Cao","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7238-7492","authenticated-orcid":false,"given":"Bihuan","family":"Chen","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7819-9656","authenticated-orcid":false,"given":"Zhuotong","family":"Zhou","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4722-3658","authenticated-orcid":false,"given":"Yiheng","family":"Huang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5927-1577","authenticated-orcid":false,"given":"JunPeng","family":"Zhao","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3376-2581","authenticated-orcid":false,"given":"Xin","family":"Peng","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,19]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"crossref","first-page":"2162","DOI":"10.1109\/TSE.2019.2944914","article-title":"SOSRepair: Expressive semantic search for real-world program repair","volume":"47","author":"Afzal Afsoon","year":"2019","unstructured":"Afsoon Afzal, Manish Motwani, Kathryn T Stolee, Yuriy Brun, and Claire Le Goues. 2019. SOSRepair: Expressive semantic search for real-world program repair. IEEE Transactions on Software Engineering, 47, 10 (2019), 2162\u20132181.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_2_1_2_1","unstructured":"bigcode. 2024. StarCoder2-15B. https:\/\/huggingface.co\/bigcode\/starcoder2-15b."},{"key":"e_1_2_1_3_1","volume-title":"Proceedings of the 2024 IEEE\/ACM 46th International Conference on Software Engineering: Companion Proceedings. 296\u2013297","author":"Chakroborti Debasish","year":"2024","unstructured":"Debasish Chakroborti, Chanchal Roy, and Kevin Schneider. 2024. A Study of Backporting Code in Open-Source Software for Characterizing Changesets. In Proceedings of the 2024 IEEE\/ACM 46th International Conference on Software Engineering: Companion Proceedings. 296\u2013297."},{"key":"e_1_2_1_4_1","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1109\/TSE.2022.3147265","article-title":"Neural transfer learning for repairing security vulnerabilities in c code","volume":"49","author":"Chen Zimin","year":"2022","unstructured":"Zimin Chen, Steve Kommrusch, and Martin Monperrus. 2022. Neural transfer learning for repairing security vulnerabilities in c code. IEEE Transactions on Software Engineering, 49, 1 (2022), 147\u2013165.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_2_1_5_1","unstructured":"Clang. 2024. clang-tidy. https:\/\/clang.llvm.org\/extra\/clang-tidy"},{"key":"e_1_2_1_6_1","doi-asserted-by":"crossref","first-page":"4087","DOI":"10.1109\/TSE.2021.3112204","article-title":"Back to the past\u2013analysing backporting practices in package dependency networks","volume":"48","author":"Decan Alexandre","year":"2021","unstructured":"Alexandre Decan, Tom Mens, Ahmed Zerouali, and Coen De Roover. 2021. Back to the past\u2013analysing backporting practices in package dependency networks. IEEE Transactions on Software Engineering, 48, 10 (2021), 4087\u20134099.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the 29th International Conference on Software Engineering. 158\u2013167","author":"Duala-Ekoko Ekwa","year":"2007","unstructured":"Ekwa Duala-Ekoko and Martin P Robillard. 2007. Tracking code clones in evolving software. In Proceedings of the 29th International Conference on Software Engineering. 158\u2013167."},{"key":"e_1_2_1_8_1","volume-title":"Proceedings of the 11th International Workshop on Automation of Software Test. 85\u201391","author":"Durieux Thomas","year":"2016","unstructured":"Thomas Durieux and Martin Monperrus. 2016. Dynamoth: dynamic code synthesis for automatic program repair. In Proceedings of the 11th International Workshop on Automation of Software Test. 85\u201391."},{"key":"e_1_2_1_9_1","volume-title":"Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering. 1469\u20131481","author":"Fan Zhiyu","year":"2023","unstructured":"Zhiyu Fan, Xiang Gao, Martin Mirchev, Abhik Roychoudhury, and Shin Hwei Tan. 2023. Automated repair of programs from large language models. In Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering. 1469\u20131481."},{"key":"e_1_2_1_10_1","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Feng Siyue","year":"2024","unstructured":"Siyue Feng, Yueming Wu, Wenjie Xue, Sikui Pan, Deqing Zou, Yang Liu, and Hai Jin. 2024. $FIRE$: Combining $Multi-Stage$ Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection. In 33rd USENIX Security Symposium (USENIX Security 24). 1867\u20131884."},{"key":"e_1_2_1_11_1","volume-title":"Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis. 19\u201330","author":"Ghanbari Ali","year":"2019","unstructured":"Ali Ghanbari, Samuel Benton, and Lingming Zhang. 2019. Practical program repair via bytecode mutation. In Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis. 19\u201330."},{"key":"e_1_2_1_12_1","unstructured":"git. 2024. git-cherry-pick. https:\/\/git-scm.com\/docs\/git-cherry-pick"},{"key":"e_1_2_1_13_1","volume-title":"Proceedings of the ACM on Software Engineering, 1, FSE","author":"Hossain Soneya Binta","year":"2024","unstructured":"Soneya Binta Hossain, Nan Jiang, Qiang Zhou, Xiaopeng Li, Wen-Hao Chiang, Yingjun Lyu, Hoan Nguyen, and Omer Tripp. 2024. A deep dive into large language models for automated bug localization and repair. Proceedings of the ACM on Software Engineering, 1, FSE (2024), 1471\u20131493."},{"key":"e_1_2_1_14_1","volume-title":"LoRA: Low-Rank Adaptation of Large Language Models. ArXiv, abs\/2106.09685","author":"Hu J. E.","year":"2021","unstructured":"J. E. Hu, Yelong Shen, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, and Weizhu Chen. 2021. LoRA: Low-Rank Adaptation of Large Language Models. ArXiv, abs\/2106.09685 (2021)."},{"key":"e_1_2_1_15_1","volume-title":"Proceedings of the 38th IEEE\/ACM International Conference on Automated Software Engineering. 1162\u20131174","author":"Huang Kai","year":"2023","unstructured":"Kai Huang, Xiangxin Meng, Jian Zhang, Yang Liu, Wenjie Wang, Shuhao Li, and Yuqing Zhang. 2023. An empirical study on fine-tuning large language models of code for automated program repair. In Proceedings of the 38th IEEE\/ACM International Conference on Automated Software Engineering. 1162\u20131174."},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering. 1\u201312","author":"Huang Zunchen","year":"2024","unstructured":"Zunchen Huang and Chao Wang. 2024. Constraint Based Program Repair for Persistent Memory Bugs. In Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering. 1\u201312."},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of the 27th ACM SIGSOFT international symposium on software testing and analysis. 298\u2013309","author":"Jiang Jiajun","year":"2018","unstructured":"Jiajun Jiang, Yingfei Xiong, Hongyu Zhang, Qing Gao, and Xiangqun Chen. 2018. Shaping program repair space with existing patches and similar code. In Proceedings of the 27th ACM SIGSOFT international symposium on software testing and analysis. 298\u2013309."},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the 30th IEEE\/ACM International Conference on Automated Software Engineering. 295\u2013306","author":"Ke Yalin","year":"2015","unstructured":"Yalin Ke, Kathryn T Stolee, Claire Le Goues, and Yuriy Brun. 2015. Repairing programs with semantic code search (t). In Proceedings of the 30th IEEE\/ACM International Conference on Automated Software Engineering. 295\u2013306."},{"key":"e_1_2_1_19_1","volume-title":"Genprog: A generic method for automatic software repair. Ieee transactions on software engineering, 38, 1","author":"Goues Claire Le","year":"2011","unstructured":"Claire Le Goues, ThanhVu Nguyen, Stephanie Forrest, and Westley Weimer. 2011. Genprog: A generic method for automatic software repair. Ieee transactions on software engineering, 38, 1 (2011), 54\u201372."},{"key":"e_1_2_1_20_1","volume-title":"Proceedings of the 2024 IEEE\/ACM 21st International Conference on Mining Software Repositories. 63\u201374","author":"Li Xingyu","year":"2024","unstructured":"Xingyu Li, Zheng Zhang, Zhiyun Qian, Trent Jaeger, and Chengyu Song. 2024. An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem. In Proceedings of the 2024 IEEE\/ACM 21st International Conference on Mining Software Repositories. 63\u201374."},{"key":"e_1_2_1_21_1","volume-title":"Proceedings of the 28th ACM SIGSOFT international symposium on software testing and analysis. 31\u201342","author":"Liu Kui","year":"2019","unstructured":"Kui Liu, Anil Koyuncu, Dongsun Kim, and Tegawend\u00e9 F Bissyand\u00e9. 2019. TBar: Revisiting template-based automated program repair. In Proceedings of the 28th ACM SIGSOFT international symposium on software testing and analysis. 31\u201342."},{"key":"e_1_2_1_22_1","unstructured":"I Loshchilov. 2017. Decoupled weight decay regularization. arXiv preprint arXiv:1711.05101."},{"key":"e_1_2_1_23_1","volume-title":"Proceedings of the XXXIV Brazilian Symposium on Software Engineering. 213\u2013222","author":"Marcondes Arthur Roberto","year":"2020","unstructured":"Arthur Roberto Marcondes and Ricardo Terra. 2020. An approach for updating forks against the original project. In Proceedings of the XXXIV Brazilian Symposium on Software Engineering. 213\u2013222."},{"key":"e_1_2_1_24_1","volume-title":"Proceedings of the 10th International Symposium of Search-Based Software Engineering. 65\u201386","author":"Martinez Matias","year":"2018","unstructured":"Matias Martinez and Martin Monperrus. 2018. Ultra-large repair search space with automatically mined templates: The cardumen mode of astor. In Proceedings of the 10th International Symposium of Search-Based Software Engineering. 65\u201386."},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the 38th international conference on software engineering. 691\u2013701","author":"Mechtaev Sergey","year":"2016","unstructured":"Sergey Mechtaev, Jooyong Yi, and Abhik Roychoudhury. 2016. Angelix: Scalable multiline program patch synthesis via symbolic analysis. In Proceedings of the 38th international conference on software engineering. 691\u2013701."},{"key":"e_1_2_1_26_1","unstructured":"Meta. 2024. CodeLlama-13b-Instruct. https:\/\/huggingface.co\/meta-llama\/CodeLlama-13b-Instruct-hf."},{"key":"e_1_2_1_27_1","unstructured":"NVD. 2023. NVD. https:\/\/nvd.nist.gov\/vuln\/data-feeds"},{"key":"e_1_2_1_28_1","unstructured":"NVD. 2024. CVE-2023-0465. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-0465"},{"key":"e_1_2_1_29_1","unstructured":"NVD. 2024. CVE-2023-1994. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-1994"},{"key":"e_1_2_1_30_1","unstructured":"OpenAI. 2024. GPT-3.5 Turbo. https:\/\/platform.openai.com\/docs\/models\/gpt-3-5-turbo."},{"key":"e_1_2_1_31_1","unstructured":"OpenAI. 2024. GPT-4o. https:\/\/platform.openai.com\/docs\/models\/gpt-4o."},{"key":"e_1_2_1_32_1","unstructured":"openssl. 2024. GitHub repository of openssl. https:\/\/github.com\/openssl\/openssl"},{"key":"e_1_2_1_33_1","unstructured":"oracle. 2024. Interface JavaCompiler. https:\/\/docs.oracle.com\/javase\/8\/docs\/api\/javax\/tools\/JavaCompiler.html"},{"key":"e_1_2_1_34_1","volume-title":"Proceedings of the 45th International Conference on Software Engineering. 957\u2013969","author":"Pan Shengyi","year":"2023","unstructured":"Shengyi Pan, Lingfeng Bao, Xin Xia, David Lo, and Shanping Li. 2023. Fine-grained commit-level vulnerability type prediction by CWE tree structure. In Proceedings of the 45th International Conference on Software Engineering. 957\u2013969."},{"key":"e_1_2_1_35_1","unstructured":"Shengyi Pan You Wang Zhongxin Liu Xing Hu Xin Xia and Shanping Li. 2024. Automating Zero-Shot Patch Porting for Hard Forks. arXiv preprint arXiv:2404.17964."},{"key":"e_1_2_1_36_1","volume-title":"Proceedings of the 4th international workshop on cooperative and human aspects of software engineering. 9\u201315","author":"Phillips Shaun","year":"2011","unstructured":"Shaun Phillips, Jonathan Sillito, and Rob Walker. 2011. Branching and merging: an investigation into current version control practices. In Proceedings of the 4th international workshop on cooperative and human aspects of software engineering. 9\u201315."},{"key":"e_1_2_1_37_1","unstructured":"Sebastian Raschka. 2024. Finetuning LLMs with LoRA and QLoRA: Insights from Hundreds of Experiments. https:\/\/lightning.ai\/pages\/community\/lora-insights"},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering. 1\u20134.","author":"Ray Baishakhi","year":"2012","unstructured":"Baishakhi Ray, Christopher Wiley, and Miryung Kim. 2012. REPERTOIRE: a cross-system porting analysis tool for forked software projects. In Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering. 1\u20134."},{"key":"e_1_2_1_39_1","unstructured":"Shuo Ren Daya Guo Shuai Lu Long Zhou Shujie Liu Duyu Tang Neel Sundaresan Ming Zhou Ambrosio Blanco and Shuai Ma. 2020. Codebleu: a method for automatic evaluation of code synthesis. arXiv preprint arXiv:2009.10297."},{"key":"e_1_2_1_40_1","volume-title":"Proceedings of the 2015 11th European Dependable Computing Conference. 132\u2013143","author":"Rodriguez Luis R","year":"2015","unstructured":"Luis R Rodriguez and Julia Lawall. 2015. Increasing automation in the backporting of Linux drivers using Coccinelle. In Proceedings of the 2015 11th European Dependable Computing Conference. 132\u2013143."},{"key":"e_1_2_1_41_1","volume-title":"Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis. 633\u2013645","author":"Shariffdeen Ridwan","year":"2021","unstructured":"Ridwan Shariffdeen, Xiang Gao, Gregory J Duck, Shin Hwei Tan, Julia Lawall, and Abhik Roychoudhury. 2021. Automated patch backporting in Linux (experience paper). In Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis. 633\u2013645."},{"key":"e_1_2_1_42_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3412376","article-title":"Automated patch transplantation","volume":"30","author":"Shariffdeen Ridwan Salihin","year":"2020","unstructured":"Ridwan Salihin Shariffdeen, Shin Hwei Tan, Mingyuan Gao, and Abhik Roychoudhury. 2020. Automated patch transplantation. ACM Transactions on Software Engineering and Methodology (TOSEM), 30, 1 (2020), 1\u201336.","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of the 31st USENIX Security Symposium. 1993\u20132010","author":"Shi Youkun","year":"2022","unstructured":"Youkun Shi, Yuan Zhang, Tianhan Luo, Xiangyu Mao, Yinzhi Cao, Ziwen Wang, Yudi Zhao, Zongan Huang, and Min Yang. 2022. Backporting security patches of web applications: A prototype design and implementation on injection vulnerability patches. In Proceedings of the 31st USENIX Security Symposium. 1993\u20132010."},{"key":"e_1_2_1_44_1","unstructured":"ShiftLeftSecurity. 2024. Joern. https:\/\/github.com\/ShiftLeftSecurity\/joern"},{"key":"e_1_2_1_45_1","volume-title":"Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1\u201313","author":"Steenhoek Benjamin","year":"2024","unstructured":"Benjamin Steenhoek, Hongyang Gao, and Wei Le. 2024. Dataflow Analysis-Inspired Deep Learning for Efficient Vulnerability Detection. In Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering. 1\u201313."},{"key":"e_1_2_1_46_1","volume-title":"Proceedings of the ACM Web Conference","author":"Tan Xin","year":"2022","unstructured":"Xin Tan, Yuan Zhang, Jiajun Cao, Kun Sun, Mi Zhang, and Min Yang. 2022. Understanding the practice of security patch management across multiple branches in oss projects. In Proceedings of the ACM Web Conference 2022. 767\u2013777."},{"key":"e_1_2_1_47_1","volume-title":"Proceedings of the 2016 IEEE International Conference on Software Maintenance and Evolution. 222\u2013232","author":"Thung Ferdian","year":"2016","unstructured":"Ferdian Thung, Xuan-Bach D Le, David Lo, and Julia Lawall. 2016. Recommending code changes for automatic backporting of Linux device drivers. In Proceedings of the 2016 IEEE International Conference on Software Maintenance and Evolution. 222\u2013232."},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","unstructured":"2024. https:\/\/doi.org\/10.5281\/zenodo.14840986 10.5281\/zenodo.14840986","DOI":"10.5281\/zenodo.14840986"},{"key":"e_1_2_1_49_1","volume-title":"Tree-sitter: An incremental parsing system for programming tools. https:\/\/tree-sitter.github.io\/tree-sitter\/","year":"2023","unstructured":"tree sitter. 2023. Tree-sitter: An incremental parsing system for programming tools. https:\/\/tree-sitter.github.io\/tree-sitter\/"},{"key":"e_1_2_1_50_1","volume-title":"Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 146\u2013158","author":"Wang Weishi","year":"2023","unstructured":"Weishi Wang, Yue Wang, Shafiq Joty, and Steven CH Hoi. 2023. Rap-gen: Retrieval-augmented patch generation with codet5 for automatic program repair. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 146\u2013158."},{"key":"e_1_2_1_51_1","volume-title":"Proceedings of the 9th Asia-Pacific Symposium on Internetware. 1\u20136.","author":"Wang Yingyi","year":"2017","unstructured":"Yingyi Wang, Yuting Chen, Beijun Shen, and Hao Zhong. 2017. Crsearcher: Searching code database for repairing bugs. In Proceedings of the 9th Asia-Pacific Symposium on Internetware. 1\u20136."},{"key":"e_1_2_1_52_1","volume-title":"Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 172\u2013184","author":"Wei Yuxiang","year":"2023","unstructured":"Yuxiang Wei, Chunqiu Steven Xia, and Lingming Zhang. 2023. Copiloting the copilots: Fusing large language models with completion engines for automated program repair. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 172\u2013184."},{"key":"e_1_2_1_53_1","volume-title":"Proceedings of the 2009 IEEE 31st International Conference on Software Engineering. 364\u2013374","author":"Weimer Westley","year":"2009","unstructured":"Westley Weimer, ThanhVu Nguyen, Claire Le Goues, and Stephanie Forrest. 2009. Automatically finding patches using genetic programming. In Proceedings of the 2009 IEEE 31st International Conference on Software Engineering. 364\u2013374."},{"key":"e_1_2_1_54_1","unstructured":"wiki. 2024. Levenshtein Distance. https:\/\/en.wikipedia.org\/wiki\/Levenshtein_distance"},{"key":"e_1_2_1_55_1","unstructured":"Wireshark. 2024. GitHub repository of Wireshark. https:\/\/github.com\/wireshark\/wireshark"},{"key":"e_1_2_1_56_1","volume-title":"Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering. 1482\u20131494","author":"Xia Chunqiu Steven","year":"2023","unstructured":"Chunqiu Steven Xia, Yuxiang Wei, and Lingming Zhang. 2023. Automated program repair in the era of large pre-trained language models. In Proceedings of the 2023 IEEE\/ACM 45th International Conference on Software Engineering. 1482\u20131494."},{"key":"e_1_2_1_57_1","volume-title":"Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 959\u2013971","author":"Xia Chunqiu Steven","year":"2022","unstructured":"Chunqiu Steven Xia and Lingming Zhang. 2022. Less training, more repairing please: revisiting automated program repair via zero-shot learning. In Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 959\u2013971."},{"key":"e_1_2_1_58_1","volume-title":"Proceedings of the 29th USENIX Security Symposium. 1165\u20131182","author":"Xiao Yang","year":"2020","unstructured":"Yang Xiao, Bihuan Chen, Chendong Yu, Zhengzi Xu, Zimu Yuan, Feng Li, Binghong Liu, Yang Liu, Wei Huo, and Wei Zou. 2020. MVP: Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures. In Proceedings of the 29th USENIX Security Symposium. 1165\u20131182."},{"key":"e_1_2_1_59_1","volume-title":"Proceedings of the 2017 32nd IEEE\/ACM International Conference on Automated Software Engineering. 660\u2013670","author":"Xin Qi","year":"2017","unstructured":"Qi Xin and Steven P Reiss. 2017. Leveraging syntax-related code for automated program repair. In Proceedings of the 2017 32nd IEEE\/ACM International Conference on Automated Software Engineering. 660\u2013670."},{"key":"e_1_2_1_60_1","volume-title":"Proceedings of the 6th ACM SIGPLAN International Symposium on Machine Programming. 1\u201310","author":"Xu Frank F","year":"2022","unstructured":"Frank F Xu, Uri Alon, Graham Neubig, and Vincent Josua Hellendoorn. 2022. A systematic evaluation of large language models of code. In Proceedings of the 6th ACM SIGPLAN International Symposium on Machine Programming. 1\u201310."},{"key":"e_1_2_1_61_1","doi-asserted-by":"crossref","first-page":"34","DOI":"10.1109\/TSE.2016.2560811","article-title":"Nopol: Automatic repair of conditional statement bugs in java programs","volume":"43","author":"Xuan Jifeng","year":"2016","unstructured":"Jifeng Xuan, Matias Martinez, Favio Demarco, Maxime Clement, Sebastian Lamelas Marcote, Thomas Durieux, Daniel Le Berre, and Martin Monperrus. 2016. Nopol: Automatic repair of conditional statement bugs in java programs. IEEE Transactions on Software Engineering, 43, 1 (2016), 34\u201355.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_2_1_62_1","volume-title":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security. 2366\u20132380","author":"Yang Su","year":"2023","unstructured":"Su Yang, Yang Xiao, Zhengzi Xu, Chengyi Sun, Chen Ji, and Yuqing Zhang. 2023. Enhancing OSS Patch Backporting with Semantics. In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security. 2366\u20132380."},{"key":"e_1_2_1_63_1","volume-title":"Proceedings of the 31st ACM SIGSOFT international symposium on software testing and analysis. 678\u2013690","author":"Yuan Wei","year":"2022","unstructured":"Wei Yuan, Quanjun Zhang, Tieke He, Chunrong Fang, Nguyen Quoc Viet Hung, Xiaodong Hao, and Hongzhi Yin. 2022. CIRCLE: continual repair across programming languages. In Proceedings of the 31st ACM SIGSOFT international symposium on software testing and analysis. 678\u2013690."},{"key":"e_1_2_1_64_1","doi-asserted-by":"crossref","first-page":"1040","DOI":"10.1109\/TSE.2018.2874648","article-title":"Arja: Automated repair of java programs via multi-objective genetic programming","volume":"46","author":"Yuan Yuan","year":"2018","unstructured":"Yuan Yuan and Wolfgang Banzhaf. 2018. Arja: Automated repair of java programs via multi-objective genetic programming. IEEE Transactions on software engineering, 46, 10 (2018), 1040\u20131067.","journal-title":"IEEE Transactions on software engineering"},{"key":"e_1_2_1_65_1","volume-title":"Proceedings of the Genetic and Evolutionary Computation Conference. 1417\u20131425","author":"Yuan Yuan","year":"2019","unstructured":"Yuan Yuan and Wolfgang Banzhaf. 2019. A hybrid evolutionary system for automatic software repair. In Proceedings of the Genetic and Evolutionary Computation Conference. 1417\u20131425."},{"key":"e_1_2_1_66_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3360004","article-title":"Toward better evolutionary program repair: An integrated approach","volume":"29","author":"Yuan Yuan","year":"2020","unstructured":"Yuan Yuan and Wolfgang Banzhaf. 2020. Toward better evolutionary program repair: An integrated approach. ACM Transactions on Software Engineering and Methodology (TOSEM), 29, 1 (2020), 1\u201353.","journal-title":"ACM Transactions on Software Engineering and Methodology (TOSEM)"}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3715718","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T15:17:25Z","timestamp":1750346245000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3715718"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,19]]},"references-count":66,"journal-issue":{"issue":"FSE","published-print":{"date-parts":[[2025,6,19]]}},"alternative-id":["10.1145\/3715718"],"URL":"https:\/\/doi.org\/10.1145\/3715718","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,19]]}}}