{"id":"https://openalex.org/W7166084202","doi":"https://doi.org/10.48550/arxiv.2606.26977","title":"CLIR: Liveness-Driven and Structure-Aware Fuzzing for the Cranelift Compiler","display_name":"CLIR: Liveness-Driven and Structure-Aware Fuzzing for the Cranelift Compiler","publication_year":2026,"publication_date":"2026-06-25","ids":{"openalex":"https://openalex.org/W7166084202","doi":"https://doi.org/10.48550/arxiv.2606.26977"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.26977","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26977","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.26977","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041990675","display_name":"Shangtong Cao","orcid":"https://orcid.org/0009-0007-4557-3813"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cao, Shangtong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006799044","display_name":"\u5b8b\u5929\u78ca","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Tianlei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060126620","display_name":"Qiuping Yi","orcid":"https://orcid.org/0009-0007-4680-4820"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi, Qiuping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050105433","display_name":"T X Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139420129","display_name":"Guoai Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Guoai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139428345","display_name":"Ningyu He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Ningyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139414038","display_name":"Haoyu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Haoyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5608999729156494,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.5608999729156494,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.15700000524520874,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.07530000060796738,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.8213000297546387},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6707000136375427},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.45910000801086426},{"id":"https://openalex.org/keywords/optimizing-compiler","display_name":"Optimizing compiler","score":0.4359999895095825},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3797999918460846},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.37950000166893005},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.37049999833106995},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.3529999852180481}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.883400022983551},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.8213000297546387},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6707000136375427},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5927000045776367},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.45910000801086426},{"id":"https://openalex.org/C190902152","wikidata":"https://www.wikidata.org/wiki/Q1325106","display_name":"Optimizing compiler","level":3,"score":0.4359999895095825},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.4138000011444092},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3797999918460846},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.37950000166893005},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.37049999833106995},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.33320000767707825},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3215000033378601},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.30820000171661377},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.2921000123023987},{"id":"https://openalex.org/C111564260","wikidata":"https://www.wikidata.org/wiki/Q4288856","display_name":"Interprocedural optimization","level":5,"score":0.29120001196861267},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C171078966","wikidata":"https://www.wikidata.org/wiki/Q111029","display_name":"Root (linguistics)","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.2644999921321869},{"id":"https://openalex.org/C7515471","wikidata":"https://www.wikidata.org/wiki/Q1936882","display_name":"Stress testing (software)","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C139571649","wikidata":"https://www.wikidata.org/wiki/Q1156793","display_name":"Program optimization","level":3,"score":0.2572999894618988},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.26977","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26977","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.26977","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26977","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Modern":[0],"compilers":[1],"are":[2],"complex":[3],"software":[4],"systems":[5],"that":[6,124,163],"must":[7],"correctly":[8],"translate":[9],"high-level":[10],"programming":[11],"languages":[12],"into":[13],"machine":[14],"code":[15],"across":[16,110,156],"multiple":[17],"architectures.":[18,112],"Cranelift,":[19],"a":[20,120,126,135,145],"fast":[21],"and":[22,30,52,60,99,144,173,181,206],"modern":[23],"compiler":[24,68],"backend":[25,36,97,103],"originally":[26],"developed":[27],"for":[28,37],"WebAssembly":[29],"recently":[31],"adopted":[32],"as":[33],"an":[34],"experimental":[35],"Rust,":[38],"has":[39],"gained":[40],"increasing":[41],"importance":[42],"due":[43],"to":[44,50,95,131,140,150],"its":[45],"superior":[46],"compilation":[47],"speed":[48],"compared":[49],"LLVM":[51],"comprehensive":[53,160],"multi-architecture":[54],"support,":[55],"including":[56,76],"x86-64,":[57],"AArch64,":[58],"s390x,":[59],"RISCV64.":[61],"However,":[62],"despite":[63],"decades":[64],"of":[65,85,193],"development":[66],"in":[67],"testing,":[69,194],"testing":[70,122],"Cranelift":[71],"still":[72],"presents":[73],"unique":[74,176],"challenges,":[75,116],"(1)":[77],"constructing":[78],"valid":[79],"IR":[80],"under":[81],"the":[82],"strict":[83],"enforcement":[84],"SSA":[86,133],"form,":[87],"(2)":[88],"generating":[89],"sequences":[90],"with":[91,105,203],"sufficient":[92],"computational":[93,142],"density":[94],"stress":[96],"components,":[98],"(3)":[100],"balancing":[101],"broad":[102],"coverage":[104],"efficient":[106,152],"root":[107,153],"cause":[108,154],"analysis":[109,155],"heterogeneous":[111,157],"To":[113],"address":[114],"these":[115],"we":[117],"propose":[118],"CLIR,":[119],"differential":[121],"framework":[123],"integrates":[125],"syntax-preserving":[127],"hierarchical":[128],"generation":[129],"strategy":[130],"guarantee":[132],"validity,":[134],"liveness-guided":[136],"instruction":[137],"refinement":[138],"mechanism":[139],"maximize":[141],"density,":[143],"diagnosis-guided":[146],"cross-architecture":[147],"adaptation":[148],"scheme":[149],"facilitate":[151],"backends.":[158],"Our":[159],"evaluation":[161],"demonstrates":[162],"CLIR":[164,195],"significantly":[165],"outperforms":[166],"existing":[167],"state-of-the-art":[168],"baselines,":[169],"detecting":[170],"8x,":[171],"24x,":[172],"8x":[174],"more":[175],"bugs":[177,198],"than":[178],"cranelift-fuzzgen,":[179],"wasm-smith,":[180],"WASMaker,":[182],"respectively,":[183],"while":[184],"RustSmith":[185],"uncovered":[186],"no":[187],"bugs.":[188],"Consequently,":[189],"within":[190],"72":[191],"hours":[192],"discovered":[196],"24":[197],"spanning":[199],"all":[200],"target":[201],"architectures,":[202],"21":[204],"confirmed":[205],"9":[207],"fixed.":[208]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-27T00:00:00"}
