Directed Testing in MLIR: Unleashing Its Potential by Overcoming the Limitations of Random Fuzzing
MLIR is a new way of creating compiler infrastructures that can be easily reused and extended. Current MLIR fuzzing methods focus primarily on test case generation or mutation using randomly selected passes. However, they often overlook the hierarchical structure of MLIR, resulting in inefficiencies in bug detection, especially for issues triggered by downstream dialects. Random testing lacks a focused approach to exploring the code space, resulting in wasted resources on normal components and overlooking bug-prone areas. To address these limitations, we introduce MLIRTracer, a top-down fuzzing approach that targets the highest level of MLIR programs (tosa IR) with a directed testing strategy. Our method systematically traverses the hierarchical code space of MLIR, from tosa IR to the lower levels, while prioritizing tests of bug-prone areas through directed exploration. MLIRTracer has successfully detected 73 bugs, with 61 already resolved by the MLIR developers.
Tue 24 JunDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
14:00 - 15:30 | Fuzzing 2Industry Papers / Journal First / Ideas, Visions and Reflections / Research Papers at Aurora B Chair(s): Haipeng Cai University at Buffalo, SUNY | ||
14:00 20mTalk | AFLNet Five Years Later: On Coverage-Guided Protocol Fuzzing Journal First Ruijie Meng National University of Singapore, Singapore, Thuan Pham University of Melbourne, Marcel Böhme MPI for Security and Privacy, Abhik Roychoudhury National University of Singapore | ||
14:20 20mTalk | My Fuzzers Won’t Build: An Empirical Study of Fuzzing Build Failures Journal First Olivier Nourry The University of Osaka, Yutaro Kashiwa Nara Institute of Science and Technology, Weiyi Shang University of Waterloo, Honglin Shu Kyushu University, Yasutaka Kamei Kyushu University | ||
14:40 20mTalk | Directed Testing in MLIR: Unleashing Its Potential by Overcoming the Limitations of Random Fuzzing Research Papers Weiyuan Tong Northwest University, Zixu Wang Northwest University, Zhanyong Tang Northwest University, Jianbin Fang National University of Defense Technology, Yuqun Zhang Southern University of Science and Technology, Guixin Ye Northwest University DOI | ||
15:00 10mTalk | GAFLERNA Ahoy! Integrating EM Side-Channel Analysis into Traditional Fuzzing Workflows Ideas, Visions and Reflections Jorge Barredo IKERLAN, Mondragon Unibertsitatea, Justyna Petke University College London, David Clark University College London, Daniel Blackwell University College London, Maialen Eceiza IKERLAN, Jose Luis Flores University of the Basque Country UPV/EHU, Mikel Iturbe Mondragon Unibertsitatea | ||
15:10 20mTalk | Grey-Box Fuzzing in Constrained Ultra-Large Systems: Lessons for SE Community Industry Papers Jiazhao Yu Sun Yat-sen University, Yanlun Tu Ant Group, Zhanlei Zhang Macquaire University, TIEHUA ZHANG Tongji University, Cheng Xu Ant Group, Weigang Wu Sun Yat-sen University, Hong Jin Kang University of Sydney, Xi Zheng Macquarie University | ||
Aurora B is the second room in the Aurora wing.
When facing the main Cosmos Hall, access to the Aurora wing is on the right, close to the side entrance of the hotel.