Software & Code
Research on Software & Code: explanations, evidence, limitations and connections between papers.
22 results
VulnSAGE checks the code evidence behind security warnings
On 187 labeled reports, VulnSAGE rejected 89 of 97 false alarms and retained 85 of 90 real defects.
Check which failure an automated pass could expose
A passing generated test may look reassuring even when its expected result comes from faulty code. A test checked against one repaired program may also misjudge other valid implementations, while a thread failure may stay hidden until a particular execution order occurs. Across three studies, the useful question is whether the check was placed in a position to distinguish the failure at issue. Their evidence comes from injected code faults, curated implementation panels, and controlled thread executions; each verdict stays tied to those evaluated conditions.
Place review where an uncertain signal would change the dataset
A brain scan can resemble another scan without proving that both belong to one person. A math problem can resemble a benchmark question without being copied from it. In either case, acting on resemblance changes the dataset. Across identity auditing, math-data cleaning, and multilingual example construction, the useful question is where an uncertain signal meets a decision. The studies place review at different points in those workflows and measure different outcomes, so their results support a placement principle rather than one shared estimate of review’s benefit.
Whole-file context helps coding agents resolve more issues
A file-selection method improved test-checked issue resolution over retrieval and compression in a 300-issue Python evaluation.
Training helps desktop agents coordinate clicks and code
OS-Helix trains desktop agents to coordinate clicks and code, raising task success on 361 Ubuntu desktop tasks.
Rondo tests compiler bugs that depend on earlier calls
Rondo tests ordered model calls to expose compiler bugs that depend on retained state across four deep learning frameworks.
A code-history check flags overlap in bug-fixing tests
BenchChecker pairs model text with repository history to detect possible training overlap in bug-fixing evaluations.
Blanc proves properties of deployed Ethereum bytecode
Blanc checks proofs against deployed Ethereum bytecode and proves contract properties under stated assumptions.
Reward hacking can spread from one coding agent to others
Tests show coding agents can pass evaluator-bypassing code onward, while review reduces hacks but can reject valid solutions.
Vulnerability fixes must also keep projects working
VulnBump tests whether coding agents remove dependency vulnerabilities while keeping real projects buildable and passing their tests.
Match each automation claim to the behavior its check observed
A reconstructed package, a triggered concurrency bug, and a generated patch can each sound like software success. Yet each workflow reaches a different behavior, and its check records a different outcome. The studies suggest a practical reading rule: trace the work from the task through execution to the recorded check. Package tests measure agreement under a fixed suite, controlled scheduling exposes observed failures, and issue tests grade applied patches. Each result supports a claim within its own setting.
Reins steers thread schedules toward concurrency bugs
Reins guides thread scheduling with agent-derived constraints and triggers more injected bugs than the strongest baseline in one test setup.
A bug-based test finds limits in automated code review
CRBugBench tests whether review agents find confirmed bugs, revealing limits on context-heavy repository tasks.
A framework shows where AI infrastructure changes slow merges
A matched repository study finds infrastructure co-changes slow merges in one cohort but not in another.
Generated tests often fail across valid implementations
TestPrism shows why single-reference test checks can overstate coding-agent reliability across valid and invalid implementations.
Chronos helps code agents search connected project history
Chronos links past code changes for agent retrieval; evaluations found more resolved coding tasks in tested configurations.
A verifier bounds image errors across wireless channels
A decoder verifier bounds image error across specified wireless disturbances, with radio checks on ten representative images.
Generated tests can preserve bugs as expected behavior
A study of generated regression tests finds that faulty expectations often persist across later changes in three Python projects.
Similar coding skills can hide the behavior users installed
A Claude Code study finds similar installed skills reduce fulfillment of distinctive instructions, while task completion does not fall.
Git histories reveal how agent skills spread
In a later period, model-ranked audits prevented more flagged-skill adoptions than audits of equally-sized star-ranked lists.
Reusable code components adapt themselves to build full repositories
LEGO adapts reusable code components and improves average native-test scores over feedback-based construction on 522 package tasks.
A shared number model clarifies when rounding can be reused
A shared number model shows when double rounding works and tests a reusable library on specialized arithmetic.