Automated repair of HTML generation errors in PHP applications using string constraint solving

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2012, Pages 277-287

  Samirni, Hesam ^a   Schäfer, Max ^b   Artzi, Shay ^b   Millstein, Todd ^a   Tip, Frank ^b   Hendren, Laurie ^c  

^a Department of Civil and Environmental Engineering   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c MCGILL UNIVERSITY   (Canada)

Author keywords

automated repair; PHP; string constraints

Indexed keywords

CONSTRAINT SOLVING; ECLIPSE PLUGIN; GENERAL REPAIR; LITERALS; PHP; SECURITY VULNERABILITIES; STRING CONSTRAINTS; WEB APPLICATION;

ERRORS; HTML; SOFTWARE ENGINEERING;

REPAIR;

EID: 84864229049     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICSE.2012.6227186     Document Type: Conference Paper

References (20)

1. 3Techs, "Usage Statistics and Market Share of PHP for Websites," http://w3techs.com.
2. S. Artzi, A. Kieżun, J. Dolby, F. Tip, D. Dig, A. M. Paradkar, and M. D. Ernst, "Finding Bugs in Web Applications Using Dynamic Test Generation and Explicit-State Model Checking," IEEE TSE, vol. 36, no. 4, pp. 474-494, 2010.
3. W. Weimer, T. Nguyen, C. L. Goues, and S. Forrest, "Automatically Finding Patches Using Genetic Programming," in ICSE, 2009, pp. 364-374.
4. H. V. Nguyen, H. A. Nguyen, T. T. Nguyen, and T. N. Nguyen, "Auto-Locating and Fix-Propagating for HTML Validation Errors to PHP Server-Side Code," in ASE, 2011, pp. 13-22.
5. E. Torlak, "A constraint solver for software engineering: Finding models and cores of large relational specifications," Ph.D. dissertation, MIT, 2009.
6. V. Ganesh, A. Kieżun, S. Artzi, P. J. Guo, P. Hooimeijer, and M. D. Ernst, "HAMPI: A String Solver for Testing, Analysis and Vulnerability Detection," in CAV, 2011, pp. 1-19.
7. P. Saxena, D. Akhawe, S. Hanna, F. Mao, S. McCamant, and D. Song, "A Symbolic Execution Framework for JavaScript," in IEEE Symp. on Security and Privacy, 2010, pp. 513-528.
8. Y. Minamide, "Static Approximation of Dynamically Generated Web Pages," in WWW, 2005, pp. 432-441.
9. A. Møller and M. Schwarz, "HTML Validation of Context-Free Languages," in FOSSACS, 2011, pp. 426-440.
10. Y. Minamide and A. Tozawa, "XML Validation for Context-Free Grammars," in APLAS, 2006, pp. 357-373.
11. G. Wassermann, C. Gould, Z. Su, and P. Devanbu, "Static Checking of Dynamically Generated Queries in Database Applications," ACM TOSEM, vol. 16, September 2007.
12. G. Wassermann and Z. Su, "Static Detection of Cross-Site Scripting Vulnerabilities," in ICSE, 2008, pp. 171-180.
13. F. Yu, M. Alkhalaf, and T. Bultan, "Patching Vulnerabilities with Sanitization Synthesis," in ICSE, 2011, pp. 251-260.
14. A. Solar-Lezama, L. Tancau, R. Bodík, S. Seshia, and V. Saraswat, "Combinatorial Sketching for Finite Programs," in ASPLOS, 2006, pp. 404-415.
15. A. Solar-Lezama, C. G. Jones, and R. Bodík, "Sketching Concurrent Data Structures," in PLDI, 2008, pp. 136-148.
16. S. Gulwani, "Automating String Processing in Spreadsheets Using Input-Output Examples," in POPL, 2011, pp. 317-330.
17. S. Chandra, E. Torlak, S. Barman, and R. Bodík, "Angelic Debugging," in ICSE, 2011, pp. 121-130.
18. F. Tip, R. M. Fuhrer, A. Kieżun, M. D. Ernst, I. Balaban, and B. D. Sutter, "Refactoring Using Type Constraints," ACM TOPLAS, vol. 33, no. 3, 2011.
19. A. Donovan, A. Kieżun, M. S. Tschantz, and M. D. Ernst, "Converting Java Programs to Use Generic Libraries," in OOPSLA, 2004, pp. 15-34.
20. F. Steimann and A. Thies, "From Public to Private to Absent: Refactoring Java Programs under Constrained Accessibility," in ECOOP, 2009, pp. 419-443.