Fuzzing MLIR Compiler Infrastructure via Operation Dependency Analysis
This program is tentative and subject to change.
MLIR (Multi-Level Intermediate Representation) compiler infrastructure has gained widespread popularity in recent years, serving as a foundation for the development of numerous compilers. It provides a comprehensive set of shared resources benefiting multiple domains simultaneously and introduces dialects to accommodate various levels of abstraction within the representation. Due to its fundamental role in compiler construction, it is critical to ensure its correctness. Recently, a grammar-based fuzzing technique (i.e., MLIRSmith) has been proposed for it and achieves notable effectiveness. However, MLIRSmith generates test programs in a random manner, which restricts the exploration of the input space, thereby limiting the overall fuzzing effectiveness. In this work, we propose a novel fuzzing technique, called MLIRod. As complicated or uncommon data/control dependencies among various operations are often helpful to trigger MLIR bugs, it constructs the operation dependency graph for an MLIR program and defines the associated operation dependency coverage to guide the fuzzing process. To drive the fuzzing process towards increasing operation dependency coverage, MLIRod then designs a set of dependency-targeted mutation rules. By applying MLIRod to the latest revisions of the MLIR compiler infrastructure, it detected 63 previously unknown bugs, among which 38/48 bugs have been fixed/confirmed by developers. Also, MLIRod has demonstrated superior effectiveness compared to the state-of-the-art MLIRSmith, achieving a remarkable 121.43% improvement in bug detection.
This program is tentative and subject to change.
Fri 20 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
10:30 - 11:50 | |||
10:30 20mTalk | Inconsistencies in TeX-produced Documents Technical Papers Pre-print | ||
10:50 20mTalk | Evaluating the Effectiveness of Decompilers Technical Papers Ying Cao Institute of Information Engineering at Chinese Academy of Sciences, Runze Zhang Institute of Information Engineering at Chinese Academy of Sciences, Ruigang Liang Institute of Information Engineering at Chinese Academy of Sciences, Kai Chen Institute of Information Engineering at Chinese Academy of Sciences DOI | ||
11:10 20mTalk | Fuzzing MLIR Compiler Infrastructure via Operation Dependency Analysis Technical Papers Chenyao Suo College of Intelligence and Computing, Tianjin University, Junjie Chen Tianjin University, Shuang Liu Renmin University of China, Jiajun Jiang Tianjin University, Yingquan Zhao Tianjin University, Jianrong Wang College of Intelligence and Computing, Tianjin University | ||
11:30 20mTalk | Towards Understanding the Bugs in Solidity Compiler Technical Papers Haoyang Ma Hong Kong University of Science and Technology, Wuqi Zhang The Hong Kong University of Science and Technology, Qingchao Shen Tianjin University, Yongqiang Tian The Hong Kong University of Science and Technology, Junjie Chen Tianjin University, Shing-Chi Cheung Hong Kong University of Science and Technology |