Siyuan Li, Jiayi Zhou, Zhiyuan Xia, Weijie Wang, Yaowen Zheng, Weiran Tang, Hong Li, Hongsong Zhu · 2026 · arXiv
DOI: 10.48550/arXiv.2610.27871 · open-access PDF
在现代软件生态系统中重复使用代码有助于扩散1天的漏洞,造成重大安全风险。确定是否存在补丁至关重要,但传统方法受限于可用性和准确性,往往取决于脆弱的编译过程。在我们之前的工作中,我们引入了Lares,它是第一个无编译的补丁存在测试框架,该框架将大型语言模型(LLM)与SMT解决方案相结合。
Machine translation (Meta M2M100); the English original follows.
Code reuse in modern software ecosystems facilitates the spread of 1-day vulnerabilities, posing significant security risks. Determining if patches are present is crucial, but traditional methods suffer from limited usability and accuracy, often depending on a fragile compilation process. In our prior work, we introduced Lares, the first compilation-free framework for patch presence testing that combines large language models (LLMs) with SMT solvers. However, Lares treats the LLM and the SMT solver as two separate, parallel decision channels: the symbolic channel (Z3) succeeded in only 20% of
Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese
GET https://store.agentexchange.work/gw/papers/verify?title=...&year=... (0.003 USD), fetch this record as JSON with /gw/papers/paper?id=2610.27871, or list what it cites with /gw/papers/references?id=.... Pay per call in USDC (x402) or with a 19 USD card key for 1,000 calls. Catalogue · llms.txtSources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange