{"id":"W4384948641","doi":"10.1109/sp46215.2023.10179314","title":"QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binaries","year":2023,"lang":"en","type":"article","venue":"","topic":"Software Testing and Debugging Techniques","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":true,"ca_institutions":"Kootenay Association for Science & Technology","funders":"","keywords":"Computer science; Callback; Symbolic execution; Programming language; Scalability; Dead code; Code (set theory); Program analysis; Control flow; Static program analysis; Unreachable code; Symbolic data analysis; Static analysis; Binary code; Theoretical computer science; Source code; Redundant code; Legacy code; Binary number; Code generation; Database; Operating system; Software; Set (abstract data type); Software development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00243966,0.002603541,0.0007833668,0.002770999,0.0007696541,0.002709869,0.002284711,0.001116987,0.01289362],"category_scores_gemma":[0.01616186,0.0008465508,0.001227402,0.001610568,0.001787006,0.005625612,0.004864963,0.001261398,0.003197505],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001735565,"about_ca_system_score_gemma":0.002036835,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00793093,"about_ca_topic_score_gemma":0.008145685,"domain_scores_codex":[0.9958197,0.0007265127,0.0003483812,0.0006853067,0.002048138,0.000371949],"domain_scores_gemma":[0.9925298,0.00414262,0.0006283578,0.00144573,0.0010561,0.000197361],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.003726978,0.0004423468,0.03391996,0.00306522,0.0002903716,0.002435412,0.005490242,0.05619928,0.0804681,0.1100136,0.2305217,0.4734268],"study_design_scores_gemma":[0.0004200599,0.0004439521,0.008142677,0.0003950337,0.0001007757,0.0009226576,0.001211365,0.683157,0.114094,0.07535699,0.1155007,0.0002549672],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.05529028,0.00057366,0.4928837,0.001022237,0.0001562183,0.0004273184,0.01134267,0.4259619,0.01234205],"genre_scores_gemma":[0.5561357,0.0005394074,0.3477515,0.0009502162,0.0001010632,0.0006320237,0.02999685,0.05262146,0.01127193],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01289362,"threshold_uncertainty_score":0.04313344,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0654954515918125,"score_gpt":0.3375128509832877,"score_spread":0.2720173993914752,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}