JITfuzz: Coverage-guided Fuzzing for JVM Just-in-Time Compilers

Mingyuan Wu1; Minghai Lu1; Heming Cui2; Junjie Chen3; Yuqun Zhang1; Lingming Zhang4

10.1109/ICSE48619.2023.00017

2023

2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE)

0270-5257

978-1-6654-5702-6

2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE)

56-68

14-20 May 2023

Melbourne, Australia

As a widely-used platform to support various Java-bytecode-based applications, Java Virtual Machine (JVM) incurs severe performance loss caused by its real-time program interpretation mechanism. To tackle this issue, the Just-in- Time compiler (JIT) has been widely adopted to strengthen the efficacy of JVM. Therefore, how to effectively and efficiently detect JIT bugs becomes critical to ensure the correctness of JVM. In this paper, we propose a coverage-guided fuzzing framework, namely JITfuzz, to automatically detect JIT bugs. In particular, JITfuzz adopts a set of optimization-activating mutators to trigger the usage of typical JIT optimizations, e.g., function inlining and simplification. Meanwhile, given JIT optimizations are closely coupled with program control flows, JITfuzz also adopts mutators to enrich the control flows of target programs. Moreover, JITfuzz also proposes a mutator scheduler which iteratively schedules mutators according to the coverage updates to maximize the code coverage of JIT. To evaluate the effectiveness of JITfuzz, we conduct a set of experiments based on a benchmark suite with 16 popular JVM-based projects from GitHub. The experimental results suggest that JITfuzz outperforms the state-of-the-art mutation-based and generation-based JVM fuzzers by 27.9 % and 18.6 % respectively in terms of edge coverage on average. Furthermore, JITfuzz also successfully detects 36 previously unknown bugs (including 23 JIT bugs) and 27 bugs (including 18 JIT bugs) have been confirmed by the developers.

Java Schedules Image Edge Detection Computer Bugs Fuzzing Benchmark Testing Virtual Machining

第一 ; 通讯

CPCI-S ; EI

WOS:001032629800008

20233914775107

Application programs ; Java programming language ; Program compilers

Computer Software, Data Handling and Applications:723 ; Computer Programming Languages:723.1.1

IEEE

1.Southern University of Science and Technology, Shenzhen, China
2.The University of Hong Kong, Hong Kong, China
3.Tianjin University, Tianjin, China
4.University of Illinois Urbana-Champaign, Champaign, USA

Mingyuan Wu,Minghai Lu,Heming Cui,et al. JITfuzz: Coverage-guided Fuzzing for JVM Just-in-Time Compilers[C],2023:56-68.