Your firmware has arrived: A study of firmware update vulnerabilities

Y Wu, J Wang, Y Wang, S Zhai, Z Li, Y He… - 33rd USENIX Security …, 2024 - usenix.org
Embedded devices are increasingly ubiquitous in our society. Firmware updates are one of
the primary mechanisms to mitigate vulnerabilities in embedded systems. However, the …

Root cause localization for unreproducible builds via causality analysis over system call tracing

Z Ren, C Liu, X Xiao, H Jiang… - 2019 34th IEEE/ACM …, 2019 - ieeexplore.ieee.org
Localization of the root causes for unreproducible builds during software maintenance is an
important yet challenging task, primarily due to limited runtime traces from build processes …

Executable formal semantics for the POSIX shell

M Greenberg, AJ Blatt - Proceedings of the ACM on Programming …, 2019 - dl.acm.org
The POSIX shell is a widely deployed, powerful tool for managing computer systems. The
shell is the expert's control panel, a necessary tool for configuring, compiling, installing …

Practically correct,{Just-in-Time} shell script parallelization

K Kallas, T Mustafa, J Bielak, D Karnikis… - … USENIX Symposium on …, 2022 - usenix.org
Recent shell-script parallelization systems enjoy mostly automated parallel speedups by
compiling scripts ahead-of-time. Unfortunately, such static parallelization is hampered by the …

On Parsing Programming Languages with Turing-Complete Parser

B Slivnik, M Mernik - Mathematics, 2023 - mdpi.com
A new parsing method based on the semi-Thue system is described. Similar to, but with
more efficient implementation than Markov normal algorithms, it can be used for parsing any …

The CoLiS platform for the analysis of maintainer scripts in Debian software packages

B Becker, N Jeannerod, C Marché… - International Journal on …, 2022 - Springer
The software packages of the Debian distribution include more than twenty-seven thousand
maintainer scripts in total, almost all of them being written in the Posix shell language. These …

[HTML][HTML] RNGSGLR: Generalization of the context-aware scanning architecture for all character-level context-free languages

Ž Leber, M Črepinšek, M Mernik, T Kosar - Mathematics, 2022 - mdpi.com
The limitations of traditional parsing architecture are well known. Even when paired with
parsing methods that accept all context-free grammars (CFGs), the resulting combination for …

Analysing installation scenarios of Debian packages

B Becker, N Jeannerod, C Marché… - … Conference on Tools …, 2020 - Springer
The Debian distribution includes more than 28 thousand maintainer scripts, almost all of
them are written in P osix shell. These scripts are executed with root privileges at installation …

DockerMock: Pre-build detection of dockerfile faults through mocking instruction execution

M Li, X Bai, M Ma, D Pei - arXiv preprint arXiv:2104.05490, 2021 - arxiv.org
Continuous Integration (CI) and Continuous Deployment (CD) are widely adopted in
software engineering practice. In reality, the CI/CD pipeline execution is not yet reliably …

Verification of shell scripts performing file hierarchy transformations

N Jeannerod - 2021 - hal.science
This thesis aims at applying techniques from deductive program verification and analysis of
tree transformations to the problem of analysing Shell scripts. In particular, we aim at …