JavaScript is prevalent in web and server apps, handling sensitive data. JS testing methods lag behind other languages. Insitu concolic testing for JS is effective but slow and complex. Our method enhances tracing with V8 Sparkplug baseline compiler and remill libraries for assembly to LLVM IR conversion. Evaluation on 160 Node.js libraries reveals comparable coverage and bug detection in significantly less time than the in-situ method.
翻译:JavaScript在Web和服务器应用中广泛使用,负责处理敏感数据。其测试方法落后于其他语言。针对JavaScript的原位汇执测试虽然有效,但速度缓慢且复杂。我们的方法利用V8 Sparkplug基线编译器进行追踪增强,并借助remill库实现汇编到LLVM IR的转换。对160个Node.js库的评估显示,与原位方法相比,该方法在显著缩短的时间范围内实现了相当的覆盖率和漏洞检测能力。