{"id":"https://openalex.org/W7224747130","doi":"https://doi.org/10.48550/arxiv.2610.39504","title":"When Static Reachability Says No: Checking Joern-Based Negative Verdicts for Python Against Execution","display_name":"When Static Reachability Says No: Checking Joern-Based Negative Verdicts for Python Against Execution","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224747130","doi":"https://doi.org/10.48550/arxiv.2610.39504"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.39504","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39504","pdf_url":"https://arxiv.org/pdf/2610.39504","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.39504","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119970775","display_name":"Artur ZIEBA-KOZARZEWSKI","orcid":"https://orcid.org/0000-0003-4696-4983","observed_orcids":["https://orcid.org/0000-0003-4696-4983"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zi\u0119ba-Kozarzewski, Artur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5160176949","display_name":"Bartosz Grzegorzewski","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Grzegorzewski, Bartosz","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.7925000190734863,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.7925000190734863,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.15860000252723694,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.019899999722838402,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/semgrep","display_name":"Semgrep","score":0.6990000009536743},{"id":"https://openalex.org/keywords/python","display_name":"Python","score":0.5519999861717224},{"id":"https://openalex.org/keywords/call-graph","display_name":"call graph","score":0.75},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.39100000262260437},{"id":"https://openalex.org/keywords/code-property-graph","display_name":"code property graph","score":0.5609999895095825}],"concepts":[{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.7659000158309937},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7286999821662903},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.630299985408783},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4851999878883362},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.48089998960494995},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.47909998893737793},{"id":"https://openalex.org/C140479938","wikidata":"https://www.wikidata.org/wiki/Q5254619","display_name":"Iterated function","level":2,"score":0.3686000108718872},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.33320000767707825},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C191399111","wikidata":"https://www.wikidata.org/wiki/Q64861","display_name":"Transitive relation","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.2574000060558319}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.39504","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39504","pdf_url":"https://arxiv.org/pdf/2610.39504","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.39504","doi":"https://doi.org/10.48550/arxiv.2610.39504","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.39504","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.39504","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39504","pdf_url":"https://arxiv.org/pdf/2610.39504","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224747130.pdf","grobid_xml":"https://content.openalex.org/works/W7224747130.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7134192905","https://openalex.org/W3153075140","https://openalex.org/W7131269937","https://openalex.org/W2716573506","https://openalex.org/W7118110785","https://openalex.org/W3089825636","https://openalex.org/W7212307637","https://openalex.org/W2999495113","https://openalex.org/W2959352824","https://openalex.org/W3199353889"],"abstract_inverted_index":{"A":[0,179],"negative":[1,183,214,230,243],"reachability":[2],"verdict":[3],"removes":[4],"a":[5,23,30,213],"finding":[6],"from":[7,33,49,81],"human":[8],"review.":[9],"We":[10,44],"check":[11],"such":[12,121],"verdicts":[13,184,231],"against":[14],"execution.":[15],"Our":[16],"pipeline,":[17],"SourceLens,":[18],"maps":[19],"Semgrep":[20],"findings":[21,211],"to":[22],"Python":[24],"program's":[25,83],"call":[26,58,131,155],"graph,":[27],"whose":[28],"edges":[29,144],"query":[31],"takes":[32],"the":[34,50,55,67,82,112,148,172,190,195,208],"calls":[35,68,117],"that":[36,181],"Joern":[37,61,109],"links":[38],"in":[39,53,134,161,217],"its":[40],"code":[41],"property":[42,138,166],"graph.":[43],"ran":[45],"two":[46],"command-line":[47],"programs":[48],"PyCG":[51],"macro-benchmark,":[52],"which":[54,171],"benchmark's":[56],"manual":[57,154],"graph":[59],"and":[60,65,95,124,137,168,192,200,228,235],"disagree,":[62],"under":[63,236],"coverage":[64],"recorded":[66],"between":[69],"their":[70],"functions.":[71,219],"On":[72],"these":[73],"edges,":[74],"123":[75],"functions":[76,125,151],"of":[77,93,103,147,164,189,194,207],"asciinema":[78,162],"are":[79,105],"unreachable":[80],"entry":[84],"points.":[85],"The":[86,107,115,153],"project's":[87],"own":[88],"integration":[89],"script":[90],"executes":[91],"86":[92],"them,":[94],"all":[96,216],"our":[97],"runs":[98],"113.":[99],"In":[100,140],"Sublist3r,":[101],"19":[102],"24":[104],"executed.":[106],"latest":[108],"release":[110],"gives":[111],"same":[113],"verdicts.":[114],"missing":[116,143],"go":[118],"through":[119,198],"values,":[120],"as":[122,133,177,225],"classes":[123],"passed":[126],"around,":[127],"or":[128],"have":[129],"no":[130],"expression,":[132],"with":[135,169,212],"blocks":[136],"reads.":[139],"asciinema,":[141],"four":[142],"make":[145],"50":[146],"113":[149,191],"executed":[150,218],"reachable.":[152],"graphs":[156],"also":[157],"lack":[158],"observed":[159],"calls,":[160],"many":[163],"them":[165],"reads":[167],"blocks,":[170],"benchmark":[173],"may":[174],"not":[175,233],"count":[176],"calls.":[178],"rule":[180],"turns":[182],"into":[185],"unknown":[186],"recovers":[187,205],"62":[188],"15":[193],"19,":[196],"mostly":[197],"dunder":[199],"private":[201],"method":[202],"names.":[203],"It":[204],"0":[206],"5":[209,229],"security":[210],"verdict,":[215],"Its":[220],"selectivity":[221],"cannot":[222],"be":[223],"measured,":[224],"only":[226],"10":[227],"were":[232],"executed,":[234],"library":[237],"entry-point":[238],"models":[239],"it":[240],"degrades":[241],"every":[242],"verdict.":[244]},"counts_by_year":[],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2026-10-31T00:00:00"}