{"id":"W4384948641","doi":"10.1109/sp46215.2023.10179314","title":"QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binaries","year":2023,"lang":"en","type":"article","venue":"","topic":"Software Testing and Debugging Techniques","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":true,"ca_institutions":"Kootenay Association for Science & Technology","funders":"","keywords":"Computer science; Callback; Symbolic execution; Programming language; Scalability; Dead code; Code (set theory); Program analysis; Control flow; Static program analysis; Unreachable code; Symbolic data analysis; Static analysis; Binary code; Theoretical computer science; Source code; Redundant code; Legacy code; Binary number; Code generation; Database; Operating system; Software; Set (abstract data type); Software development","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006207007,0.0001453465,0.0002026536,0.0004461873,0.000140594,0.0001532312,0.0005998078,0.00007679241,0.00000399411],"category_scores_gemma":[0.0007237156,0.0001314347,0.00005874756,0.0008497375,0.00003155195,0.0001718861,0.00019144,0.0001136769,0.00007863494],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005785086,"about_ca_system_score_gemma":0.00006639038,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001072439,"about_ca_topic_score_gemma":0.00008795112,"domain_scores_codex":[0.9987543,0.00004364148,0.0002316995,0.0004004337,0.0001710253,0.0003989067],"domain_scores_gemma":[0.9977123,0.001675087,0.00005524822,0.0004525159,0.0000461832,0.00005867117],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"not_applicable","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005647074,0.0002429162,0.08865572,0.0001471793,0.00002836613,0.0001186992,0.002805823,0.001303439,0.0004809768,0.3038686,0.5317274,0.07056442],"study_design_scores_gemma":[0.001114838,0.0005776355,0.05407381,0.0005248464,0.000006580971,0.00001925651,0.00004727151,0.5392903,0.007308631,0.3882355,0.007929459,0.00087184],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3088817,0.00004582696,0.6328232,0.004373,0.0008038875,0.0007628284,0.00001553046,0.04950981,0.00278416],"genre_scores_gemma":[0.8820029,0.000008882965,0.1160692,0.0009121575,0.00004869979,0.0001648343,0.000008394226,0.00002026515,0.0007647006],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.5731211,"threshold_uncertainty_score":0.535975,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0654954515918125,"score_gpt":0.3375128509832877,"score_spread":0.2720173993914752,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}