WASMaker: Differential Testing of WebAssembly Runtimes via Semantic-aware Binary Generation
This program is tentative and subject to change.
A fundamental component of the Wasm ecosystem is the Wasm runtime, as it directly impacts whether Wasm applications can be executed as expected. Bugs in Wasm runtimes are frequently reported, so the research community has made a few attempts to design automated testing frameworks to detect bugs in Wasm runtimes. However, existing testing frameworks are limited by the quality of test cases, i.e., they face challenges in generating Wasm binaries that are both semantically rich and syntactically correct. As a result, complicated bugs cannot be triggered effectively. In this work, we present WASMaker, a novel differential testing framework that can generate complicated Wasm test cases by disassembling and assembling real-world Wasm binaries, which can trigger hidden inconsistencies among Wasm runtimes. To further pinpoint the root causes of unexpected behaviors, we design a runtime-agnostic root cause location method to locate bugs accurately. Extensive evaluation suggests that WASMaker outperforms state-of-the-art techniques in terms of both efficiency and effectiveness. We have uncovered 33 unique bugs in popular Wasm runtimes, among which 25 have been confirmed.
This program is tentative and subject to change.
Thu 19 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
13:30 - 14:50 | |||
13:30 20mTalk | Tacoma: Enhanced Browser Fuzzing with Fine-Grained Semantic Alignment Technical Papers Jiashui Wang Zhejiang University, Peng Qian Zhejiang University, Xilin Huang Ant Group, Xinlei Ying Ant Group, Yan Chen Zhejiang University, Shouling Ji Zhejiang University, Jianhai Chen Zhejiang University, China, Jundong XIe Ant Group, Long Liu Ant Group | ||
13:50 20mTalk | Multi-modal Learning for WebAssembly Reverse Engineering Technical Papers DOI | ||
14:10 20mTalk | WASMaker: Differential Testing of WebAssembly Runtimes via Semantic-aware Binary Generation Technical Papers Shangtong Cao Beijing University of Posts and Telecommunications, Ningyu He Peking University, Xinyu She Huazhong University of Science and Technology, Yixuan Zhang Peking University, Mu Zhang University of Utah, Haoyu Wang Huazhong University of Science and Technology | ||
14:30 20mTalk | Wapplique: Testing WebAssembly Runtime via Execution Context-aware Bytecode Mutation Technical Papers Wenxuan Zhao School of Computer Science, Fudan University, Ruiying Zeng Fudan University, Yangfan Zhou Fudan University |