Trail of Bits @ ICSE 2019 – Recap

Summary: Trail of Bits presented its Slither static analysis work at WETSEB, an ICSE 2019 workshop, and recapped conference papers on static analysis, fuzzing, blockchain, and automated bug patching. Among the cited work, Facebook's SapFix tool fixes null-pointer faults at scale by combining Sapienz and Infer and abandons a patch if no developer reviews it within seven days.
Bottom line: A separate paper evaluated eight automatic software repair tools with 35 developers and found the tools' results were not as promising as claimed, with some evaluations generating incorrect patches - a caution for anyone weighing automated patching against developer review.

Read the original at Trail of Bits Blog ↗