SPLASH 2025
Sun 12 - Sat 18 October 2025 Singapore
co-located with ICFP/SPLASH 2025

This program is tentative and subject to change.

Fri 17 Oct 2025 16:30 - 16:45 at Orchid Plenary Ballroom - Testing 2

JavaScript (JS) engines implement complex language semantics and optimization strategies to support the dynamic nature of JS, making them difficult to test thoroughly and prone to subtle, security-critical bugs. Existing fuzzers often struggle to generate diverse and valid test cases. They either rely on syntax-level mutations that lack semantic awareness or perform limited, local mutations on concrete code, thus failing to explore deeper, more complex program behaviors. This paper presents TemuJs, a novel fuzzing framework that performs extraction and mutation at a high level, operating on abstract templates derived from real-world JS programs. These templates capture coarse-grained program structures with semantic placeholders, enabling semantics-aware mutations that preserve the high-level intent of the original code while diversifying its behavior. By decoupling mutation from concrete syntax and leveraging a structured intermediate representation for the templates, TemuJs explores a broader and more meaningful space of program behaviors. Evaluated on three major JS engines, namely, V8, SpiderMonkey, and JavaScriptCore, TemuJs discovers 44 bugs and achieves a 10.3% increase in edge coverage compared to state-of-the-art fuzzers on average. Our results demonstrate the efficacy of high-level, template-mutation fuzzing in testing JS engines.

This program is tentative and subject to change.

Fri 17 Oct

Displayed time zone: Perth change

16:00 - 17:30
16:00
15m
Talk
Bennet: Randomized Specification Testing for Heap-Manipulating Programs
OOPSLA
Zain K Aamer University of Pennsylvania, Benjamin C. Pierce University of Pennsylvania
16:15
15m
Talk
DepFuzz: Efficient Smart Contract Fuzzing with Function Dependence Guidance
OOPSLA
Chenyang Ma Nanjing University of Science and Technology, Wei Song Nanjing University of Science and Technology, Jeff Huang Texas A&M University
16:30
15m
Talk
Extraction and Mutation at a High Level: Template-Based Fuzzing for JavaScript Engines
OOPSLA
Wai Kin Wong Hong Kong University of Science and Technology, Dongwei Xiao Hong Kong University of Science and Technology, Cheuk Tung LAI VX Research Limited, Yiteng Peng Hong Kong University of Science and Technology, Daoyuan Wu Lingnan University, Shuai Wang Hong Kong University of Science and Technology
16:45
15m
Talk
Finding Compiler Bugs through Cross-Language Code Generator and Differential Testing
OOPSLA
Qiong Feng Nanjing University of Science and Technology, Xiaotian Ma Nanjing University of Science and Technology, Ziyuan Feng Nanjing University of Science and Technology, Marat Akhin JetBrains, Wei Song Nanjing University of Science and Technology, Peng Liang Wuhan University, China
17:00
15m
Talk
Formalizing Linear Motion G-code for Invariant Checking and Differential Testing of Fabrication Tools
OOPSLA
Yumeng He University of Utah, Chandrakana Nandi Certora, Sreepathi Pai University of Rochester
17:15
15m
Talk
Understanding and Improving Flaky Test Classification
OOPSLA
Shanto Rahman The University of Texas at Austin, Saikat Dutta Cornell University, August Shi The University of Texas at Austin