EASE 2026
Tue 9 - Fri 12 June 2026 Glasgow, United Kingdom
Tue 9 Jun 2026 11:50 - 12:00 at JMS 745 - Bugs and Defects Chair(s): Giuseppe Destefanis

Zorya is a concolic execution framework that lifts compiled binaries to Ghidra’s P-Code intermediate representation and uses the Z3 SMT solver to detect vulnerabilities by reasoning over both concrete and symbolic values. Previous versions supported only single-threaded TinyGo binaries. In this paper, we extend Zorya to multi-threaded binaries produced by Go’s standard gc compiler. This is achieved by restoring OS thread states from gdb dumps, neutralizing runtime preemption, and introducing overlay path analysis with copy-on-write semantics to detect silent vulnerabilities on untaken branches. We rigorously assess Zorya on 11 real-world vulnerabilities from production Go projects such as Kubernetes, Go-Ethereum, and CoreDNS. Our evaluation reveals that Zorya detects seven bugs at the binary level, including a silent integer overflow that no other evaluated tool finds without a manually written oracle.

Tue 9 Jun

Displayed time zone: London change

11:00 - 12:30
Bugs and DefectsResearch Papers / Short Papers and Emerging Results / AI Models / Data / Industry Papers at JMS 745
Chair(s): Giuseppe Destefanis University College London (UCL)
11:00
15m
Talk
Where did we fail? - Reproducing build failures in embedded open source software
AI Models / Data
Han Fu , Sigrid Eldh Ericsson AB, Mälardalen University, Carleton University, Andreas Ermedahl Ericsson AB / KTH Royal Institute of Technology, Kristian Wiklund Ericsson AB, Philipp Haller KTH Royal Institute of Technology, Cyrille Artho KTH Royal Institute of Technology, Sweden
Pre-print
11:15
15m
Talk
Towards Better Static Code Analysis Reports: Sentence Transformer-based Filtering of Non-Actionable Alerts
Research Papers
Tamás Aladics University of Szeged, Norbert Vándor University of Szeged, Rudolf Ferenc University of Szeged, Peter Hegedus University of Szeged
Pre-print
11:30
10m
Talk
Bug-Report–Driven Fault Localization: Industrial Benchmarking and Lessons Learned at ABB Robotics
Industry Papers
Pernilla Hall ABB Robotics, Anton Ununger ABB Robotics, Riccardo Rubei Malardalen University, Alessio Bucaioni Mälardalen University
Pre-print
11:40
10m
Talk
Hot Fixing in the Wild
Short Papers and Emerging Results
Carol Hanna University College London, Karine Even-Mendoza King’s College London, William B. Langdon University College London, Mar Zamorano López Universidad del Atlántico Medio, Justyna Petke University College London, Federica Sarro University College London
Pre-print
11:50
10m
Talk
From TinyGo to gc Compiler: Extending Zorya’s Concolic Framework to Real-World Go Binaries
Short Papers and Emerging Results
Karolina Gorna Telecom Paris and Ledger Donjon, Nicolas Iooss Ledger Donjon, Yannick Seurin Ledger Donjon, Rida Khatoun Telecom Paris, Keith Makan University of the Western Cape
Pre-print
12:00
10m
Talk
Toward an Understanding of Developer Behaviour while Using Bug Localization Tools
Short Papers and Emerging Results
Pablo Diaz Pedreira The Open University, Tamara Lopez The Open University, Michel Wermelinger The Open University
Pre-print