eprintid: 10176723 rev_number: 6 eprint_status: archive userid: 699 dir: disk0/10/17/67/23 datestamp: 2023-09-15 09:57:53 lastmod: 2023-09-15 09:57:53 status_changed: 2023-09-15 09:57:53 type: article metadata_visibility: show sword_depositor: 699 creators_name: Yixuan, Zhang creators_name: Shangtong, Cao creators_name: Haoyu, Wang creators_name: Chen, Zhenpeng creators_name: Xiapu, Luo creators_name: Dongliang, Mu creators_name: Yun, Ma creators_name: Gang, Huang creators_name: Xuanzhe, Liu title: Characterizing and Detecting WebAssembly Runtime Bugs ispublished: inpress divisions: UCL divisions: B04 divisions: C05 divisions: F48 keywords: WebAssembly, WebAssembly runtime note: This version is the author accepted manuscript. For information on re-use, please refer to the publisher's terms and conditions. abstract: WebAssembly (abbreviated WASM) has emerged as a promising language of the Web and also been used for a wide spectrum of software applications such as mobile applications and desktop applications. These applications, named as WASM applications, commonly run in WASM runtimes. Bugs in WASM runtimes are frequently reported by developers and cause the crash of WASM applications. However, these bugs have not been well studied. To fill in the knowledge gap, we present a systematic study to characterize and detect bugs in WASM runtimes. We first harvest a dataset of 311 real-world bugs from hundreds of related posts on GitHub. Based on the collected high-quality bug reports, we distill 31 bug categories of WASM runtimes and summarize their common fix strategies. Furthermore, we develop a pattern-based bug detection framework to automatically detect bugs in WASM runtimes. We apply the detection framework to seven popular WASM runtimes and successfully uncover 60 bugs that have never been reported previously, among which 13 have been confirmed and 9 have been fixed by runtime developers. date: 2023-09-30 date_type: published publisher: Association for Computing Machinery official_url: https://dl.acm.org/ oa_status: green full_text_type: other language: eng primo: open primo_central: open_green verified: verified_manual elements_id: 2085294 lyricists_name: Chen, Zhenpeng lyricists_id: ZCHEM62 actors_name: Chen, Zhenpeng actors_id: ZCHEM62 actors_role: owner full_text_status: public publication: ACM Transactions on Software Engineering and Methodology citation: Yixuan, Zhang; Shangtong, Cao; Haoyu, Wang; Chen, Zhenpeng; Xiapu, Luo; Dongliang, Mu; Yun, Ma; ... Xuanzhe, Liu; + view all <#> Yixuan, Zhang; Shangtong, Cao; Haoyu, Wang; Chen, Zhenpeng; Xiapu, Luo; Dongliang, Mu; Yun, Ma; Gang, Huang; Xuanzhe, Liu; - view fewer <#> (2023) Characterizing and Detecting WebAssembly Runtime Bugs. ACM Transactions on Software Engineering and Methodology (In press). Green open access document_url: https://discovery.ucl.ac.uk/id/eprint/10176723/1/TOSEM_Characterizing_and_Detecting_Bugs_in_WebAssembly_Runtimes_first_look_version_.pdf