{"id":"https://openalex.org/W3133304533","doi":"https://doi.org/10.1109/tse.2021.3058985","title":"A Study of C/C++ Code Weaknesses on Stack Overflow","display_name":"A Study of C/C++ Code Weaknesses on Stack Overflow","publication_year":2021,"publication_date":"2021-02-19","ids":{"openalex":"https://openalex.org/W3133304533","doi":"https://doi.org/10.1109/tse.2021.3058985","mag":"3133304533"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2021.3058985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2021.3058985","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100765845","display_name":"Haoxiang Zhang","orcid":"https://orcid.org/0000-0002-3921-1724"},"institutions":[{"id":"https://openalex.org/I4210115038","display_name":"Huawei Technologies (Canada)","ror":"https://ror.org/026venb53","country_code":"CA","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210115038"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Haoxiang Zhang","raw_affiliation_strings":["Centre for Software Excellence, Huawei Technologies Co Ltd Canada, Markham, ON, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3921-1724","affiliations":[{"raw_affiliation_string":"Centre for Software Excellence, Huawei Technologies Co Ltd Canada, Markham, ON, Canada","institution_ids":["https://openalex.org/I4210115038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100664833","display_name":"Shaowei Wang","orcid":"https://orcid.org/0000-0003-3823-1771"},"institutions":[{"id":"https://openalex.org/I46247651","display_name":"University of Manitoba","ror":"https://ror.org/02gfys938","country_code":"CA","type":"education","lineage":["https://openalex.org/I46247651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shaowei Wang","raw_affiliation_strings":["Department of Computer Science, University of Manitoba, Winnipeg, MB, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3823-1771","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Manitoba, Winnipeg, MB, Canada","institution_ids":["https://openalex.org/I46247651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100338781","display_name":"Heng Li","orcid":"https://orcid.org/0000-0001-5441-6763"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Heng Li","raw_affiliation_strings":["Department of Computer Engineering and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-5441-6763","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069372430","display_name":"Tse-Hsun Chen","orcid":"https://orcid.org/0000-0003-4027-0905"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Tse-Hsun Chen","raw_affiliation_strings":["Software Performance, Analysis, and Reliability (SPEAR) Lab, Concordia University, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-4027-0905","affiliations":[{"raw_affiliation_string":"Software Performance, Analysis, and Reliability (SPEAR) Lab, Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091586373","display_name":"Ahmed E. Hassan","orcid":"https://orcid.org/0000-0001-7749-5513"},"institutions":[{"id":"https://openalex.org/I204722609","display_name":"Queen's University","ror":"https://ror.org/02y72wh86","country_code":"CA","type":"education","lineage":["https://openalex.org/I204722609"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ahmed E. Hassan","raw_affiliation_strings":["Software Analysis and Intelligence Lab (SAIL), Queen&#x0027;s University, Kingston, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software Analysis and Intelligence Lab (SAIL), Queen&#x0027;s University, Kingston, ON, Canada","institution_ids":["https://openalex.org/I204722609"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.1468,"has_fulltext":false,"cited_by_count":48,"citation_normalized_percentile":{"value":0.97805151,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":"48","issue":"7","first_page":"2359","last_page":"2375"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.7012563347816467},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6485239267349243},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.6116839647293091},{"id":"https://openalex.org/keywords/stack","display_name":"Stack (abstract data type)","score":0.5608361959457397},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4854345917701721},{"id":"https://openalex.org/keywords/mathematical-notation","display_name":"Mathematical notation","score":0.4822433888912201},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4335448741912842},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3543883264064789},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.23886752128601074},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.22707423567771912}],"concepts":[{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.7012563347816467},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6485239267349243},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.6116839647293091},{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.5608361959457397},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4854345917701721},{"id":"https://openalex.org/C24457124","wikidata":"https://www.wikidata.org/wiki/Q1140046","display_name":"Mathematical notation","level":3,"score":0.4822433888912201},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4335448741912842},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3543883264064789},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.23886752128601074},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.22707423567771912},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2021.3058985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2021.3058985","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:publications.polymtl.ca:48564","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/48564/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article de revue"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W397180395","https://openalex.org/W991099836","https://openalex.org/W1981552292","https://openalex.org/W1986601961","https://openalex.org/W2010367507","https://openalex.org/W2056894403","https://openalex.org/W2087093271","https://openalex.org/W2088069056","https://openalex.org/W2102646107","https://openalex.org/W2137203506","https://openalex.org/W2146649871","https://openalex.org/W2511044583","https://openalex.org/W2511548333","https://openalex.org/W2538721342","https://openalex.org/W2564265768","https://openalex.org/W2568457029","https://openalex.org/W2587026909","https://openalex.org/W2598817001","https://openalex.org/W2606396711","https://openalex.org/W2621026180","https://openalex.org/W2759023773","https://openalex.org/W2766217896","https://openalex.org/W2767380523","https://openalex.org/W2802831671","https://openalex.org/W2810627707","https://openalex.org/W2897316866","https://openalex.org/W2901980656","https://openalex.org/W2907964905","https://openalex.org/W2945398222","https://openalex.org/W2953854830","https://openalex.org/W2955552127","https://openalex.org/W2955557916","https://openalex.org/W2964144088","https://openalex.org/W3085545669","https://openalex.org/W4252540671","https://openalex.org/W4294214797","https://openalex.org/W6634887214","https://openalex.org/W6714019648","https://openalex.org/W6910374392"],"related_works":["https://openalex.org/W2393607213","https://openalex.org/W2495832077","https://openalex.org/W1968256718","https://openalex.org/W2624682093","https://openalex.org/W98357545","https://openalex.org/W2278797713","https://openalex.org/W4249487612","https://openalex.org/W977407476","https://openalex.org/W3167735904","https://openalex.org/W4280602899"],"abstract_inverted_index":{"Stack":[0,19,36,130,293,337,366],"Overflow":[1,20,37,294,338],"hosts":[2],"millions":[3],"of":[4,63,73,81,94,97,101,120,137,142,161,175,194,200,210,225,300,328,361],"solutions":[5],"that":[6,88,265,296,325,347],"aim":[7],"to":[8,167,269,286,357],"solve":[9],"developers\u2019":[10],"programming":[11],"issues.":[12,304],"In":[13,55,182],"this":[14,56],"crowdsourced":[15,363],"question":[16],"answering":[17],"process,":[18],"becomes":[21],"a":[22,143,189,259,320],"code":[23,33,71,86,109,152,184,195,230,235,241,255,279,290,312,346],"hosting":[24],"website":[25],"where":[26],"developers":[27],"actively":[28],"share":[29,289],"its":[30,351],"code.":[31],"However,":[32,197],"snippets":[34,47,72,87,153,177,231,256,291],"on":[35,129,292,350,365],"may":[38],"contain":[39],"security":[40,50,303],"vulnerabilities,":[41],"and":[42,105,154,213,323],"if":[43],"shared":[44],"carelessly,":[45],"such":[46,108],"can":[48,339],"introduce":[49],"problems":[51],"in":[52,70,92,126,149,178,191,206,276],"software":[53,156],"systems.":[54,157],"paper,":[57],"we":[58,317],"empirically":[59],"study":[60,283,322],"the":[61,64,79,95,99,140,159,172,192,198,207,211,271,301,307,335,345,359,362],"prevalence":[62],"<i>Common":[65],"Weakness":[66],"Enumeration</i>":[67],"\u2013":[68],"CWE,":[69],"C/C++":[74,176,229],"related":[75],"answers.":[76],"We":[77,111,262],"explore":[78],"characteristics":[80],"<inline-formula><tex-math":[82,102,127,162,201,215],"notation=\"LaTeX\">$Code_w$</tex-math></inline-formula>":[83,103,128,163,202,216],",":[84,104,146],"i.e.,":[85,134],"have":[89,270],"CWE":[90,122,243,273,341],"instances,":[91],"terms":[93],"types":[96,123],"weaknesses,":[98],"evolution":[100],"who":[106,227,288],"contributed":[107,228,239],"snippets.":[110,280],"find":[112,264,324],"that:":[113],"1)":[114],"36":[115],"percent":[116,224,327],"(i.e.,":[117,250],"32":[118],"out":[119],"89)":[121],"are":[124,186,298,332],"detected":[125],"Overflow.":[131,367],"Particularly,":[132],"CWE-119,":[133],"<i>improper":[135],"restriction":[136],"operations":[138],"within":[139],"bounds":[141],"memory":[144],"buffer</i>":[145],"is":[147,348,355],"common":[148],"both":[150],"answer":[151,315],"real-world":[155],"Furthermore,":[158],"proportion":[160],"doubled":[164],"from":[165],"2008":[166],"2018":[168],"after":[169],"normalizing":[170],"by":[171,314,334],"total":[173],"number":[174,193],"each":[179],"year.":[180],"2)":[181],"general,":[183],"revisions":[185,331],"associated":[187],"with":[188,236,242],"reduction":[190],"weaknesses.":[196,237],"majority":[199],"had":[203,258],"weaknesses":[204,313],"introduced":[205],"first":[208],"version":[209],"code,":[212],"these":[214],"were":[217,247],"never":[218],"revised":[219,253],"since":[220],"then.":[221],"Only":[222],"7.5":[223],"users":[226,267,287],"posted":[232],"or":[233,257],"edited":[234],"Users":[238],"less":[240],"weakness":[244],"when":[245],"they":[246,251,297],"more":[248,254],"active":[249],"either":[252],"higher":[260],"reputation).":[261],"also":[263,318],"some":[266],"tended":[268],"same":[272],"type":[274],"repeatedly":[275],"their":[277],"various":[278],"Our":[281],"empirical":[282],"provides":[284],"insights":[285],"so":[295],"aware":[299],"potential":[302],"To":[305],"understand":[306],"community":[308],"feedback":[309],"about":[310],"improving":[311],"revisions,":[316],"conduct":[319],"qualitative":[321],"62.5":[326],"our":[329],"suggested":[330],"adopted":[333],"community.":[336],"perform":[340],"scanning":[342],"for":[343],"all":[344],"hosted":[349],"platform.":[352],"Further":[353],"research":[354],"needed":[356],"improve":[358],"quality":[360],"knowledge":[364]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}