{"id":"https://openalex.org/W2059278087","doi":"https://doi.org/10.1145/2338965.2336769","title":"Undangle: early detection of dangling pointers in use-after-free and double-free vulnerabilities","display_name":"Undangle: early detection of dangling pointers in use-after-free and double-free vulnerabilities","publication_year":2012,"publication_date":"2012-07-15","ids":{"openalex":"https://openalex.org/W2059278087","doi":"https://doi.org/10.1145/2338965.2336769","mag":"2059278087"},"language":"en","primary_location":{"id":"doi:10.1145/2338965.2336769","doi":"https://doi.org/10.1145/2338965.2336769","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2338965.2336769","pdf_url":null,"source":{"id":"https://openalex.org/S4306420215","display_name":"International Symposium on Software Testing and Analysis","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101938709","display_name":"Juan Caballero","orcid":"https://orcid.org/0000-0003-2962-1348","observed_orcids":["https://orcid.org/0000-0003-2962-1348"]},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Juan Caballero","raw_affiliation_strings":["IMDEA Software Institute, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute, Spain","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048781020","display_name":"Gustavo Grieco","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Gustavo Grieco","raw_affiliation_strings":["IMDEA Software Institute, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute, Spain","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024427812","display_name":"Mark Marron","orcid":"https://orcid.org/0000-0003-3589-4860","observed_orcids":["https://orcid.org/0000-0003-3589-4860"]},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Mark Marron","raw_affiliation_strings":["IMDEA Software Institute, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute, Spain","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051755599","display_name":"Antonio Nappa","orcid":"https://orcid.org/0000-0002-9469-4925","observed_orcids":["https://orcid.org/0000-0002-9469-4925"]},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Antonio Nappa","raw_affiliation_strings":["IMDEA Software Institute, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute, Spain","institution_ids":["https://openalex.org/I4210162154"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210162154"],"apc_list":null,"apc_paid":null,"fwci":3.8555,"has_fulltext":false,"cited_by_count":171,"citation_normalized_percentile":{"value":0.94984105,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"133","last_page":"143"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.03359999880194664,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/use-after-free-vulnerabilities","display_name":"use-after-free vulnerabilities","score":0.8939999938011169},{"id":"https://openalex.org/keywords/dangling-pointers","display_name":"dangling pointers","score":0.9959999918937683},{"id":"https://openalex.org/keywords/early-detection","display_name":"early detection","score":0.8379999995231628},{"id":"https://openalex.org/keywords/browser-security","display_name":"browser security","score":0.7020000219345093},{"id":"https://openalex.org/keywords/firefox","display_name":"Firefox","score":0.7160000205039978},{"id":"https://openalex.org/keywords/vulnerability-diagnosis","display_name":"vulnerability diagnosis","score":0.5490000247955322}],"concepts":[{"id":"https://openalex.org/C150202949","wikidata":"https://www.wikidata.org/wiki/Q107602","display_name":"Pointer (user interface)","level":2,"score":0.8102374076843262},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7837996482849121},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7088845372200012},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.4852037727832794},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.4679476320743561},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4371311664581299},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.42962193489074707},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2643548250198364},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1847086250782013},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13665303587913513},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.07415062189102173},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2338965.2336769","doi":"https://doi.org/10.1145/2338965.2336769","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2338965.2336769","pdf_url":null,"source":{"id":"https://openalex.org/S4306420215","display_name":"International Symposium on Software Testing and Analysis","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.357.3351","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.357.3351","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/en-us/um/people/marron/selectpubs/Undangle.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320312087","display_name":"Association for Prevention Teaching and Research","ror":"https://ror.org/05q2bhv13"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W31771106","https://openalex.org/W82260615","https://openalex.org/W1499241274","https://openalex.org/W1499992849","https://openalex.org/W1506510492","https://openalex.org/W1567903304","https://openalex.org/W1588668624","https://openalex.org/W1825457006","https://openalex.org/W1826158585","https://openalex.org/W1973326708","https://openalex.org/W2002934700","https://openalex.org/W2005907808","https://openalex.org/W2049867480","https://openalex.org/W2057330156","https://openalex.org/W2096449544","https://openalex.org/W2100666033","https://openalex.org/W2102970979","https://openalex.org/W2104000753","https://openalex.org/W2117703831","https://openalex.org/W2122757982","https://openalex.org/W2129752927","https://openalex.org/W2132897303","https://openalex.org/W2134028114","https://openalex.org/W2136938453","https://openalex.org/W2140611647","https://openalex.org/W2153463445","https://openalex.org/W2156453323","https://openalex.org/W2156729262","https://openalex.org/W2165100126","https://openalex.org/W2398729674","https://openalex.org/W2401156470","https://openalex.org/W2504609973","https://openalex.org/W4234020632","https://openalex.org/W4237492309","https://openalex.org/W4248542611","https://openalex.org/W4250981365","https://openalex.org/W4254762831","https://openalex.org/W6884737772"],"related_works":["https://openalex.org/W7162701872","https://openalex.org/W2089750484","https://openalex.org/W3008147559","https://openalex.org/W4285154367","https://openalex.org/W4293151322","https://openalex.org/W3177718407","https://openalex.org/W4396234760","https://openalex.org/W4387321736","https://openalex.org/W2433512803","https://openalex.org/W4403967514"],"abstract_inverted_index":{"Use-after-free":[0,12],"vulnerabilities":[1,15,152],"are":[2,16,96],"rapidly":[3],"growing":[4],"in":[5,92,122,131,153],"popularity,":[6],"especially":[7],"for":[8,37,139,175],"exploiting":[9],"web":[10,180],"browsers.":[11],"(and":[13],"double-free)":[14],"caused":[17],"by":[18,87,113],"a":[19,23,33,59,132,156,183],"program":[20],"operating":[21],"on":[22,49,142,177],"dangling":[24,60,72,90,119],"pointer.":[25],"In":[26],"this":[27],"work":[28,47],"we":[29],"propose":[30],"early":[31,62,128],"detection,":[32],"novel":[34],"runtime":[35],"approach":[36],"finding":[38],"and":[39,42,106,160],"diagnosing":[40],"use-after-free":[41],"double-free":[43],"vulnerabilities.":[44,145],"While":[45],"previous":[46],"focuses":[48],"the":[50,53,56,65,68,71,75,78,83,108,123,168,178],"creation":[51,69],"of":[52,58,70,77,85,110],"vulnerability":[54,104,140],"(i.e.,":[55],"use":[57],"pointer),":[61],"detection":[63,81,129],"shifts":[64],"focus":[66],"to":[67],"pointer(s)":[73],"at":[74],"root":[76,158],"vulnerability.":[79,124,185],"Early":[80],"increases":[82],"effectiveness":[84],"testing":[86,176],"identifying":[88,182],"unsafe":[89],"pointers":[91,120],"executions":[93],"where":[94],"they":[95],"created":[97],"but":[98],"not":[99,165],"used.":[100],"It":[101],"also":[102,172],"accelerates":[103],"analysis":[105,141,147],"minimizes":[107],"risk":[109],"incomplete":[111],"fixes,":[112],"automatically":[114],"collecting":[115],"information":[116],"about":[117],"all":[118],"involved":[121],"We":[125,136,171],"implement":[126],"our":[127],"technique":[130],"tool":[133],"called":[134],"Undangle.":[135],"evaluate":[137,173],"Undangle":[138,174],"8":[143],"real-world":[144],"The":[146],"uncovers":[148],"that":[149,161],"two":[150],"separate":[151],"Firefox":[154,179],"had":[155],"common":[157],"cause":[159],"their":[162],"patches":[163],"did":[164],"completely":[166],"fix":[167],"underlying":[169],"bug.":[170],"browser":[181],"potential":[184]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":19},{"year":2020,"cited_by_count":16},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":16},{"year":2017,"cited_by_count":12},{"year":2016,"cited_by_count":10},{"year":2015,"cited_by_count":10},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":4}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}