Squirrel: Testing database management systems with language validity and coverage feedback

R Zhong, Y Chen, H Hu, H Zhang, W Lee… - Proceedings of the 2020 …, 2020 - dl.acm.org
Fuzzing is an increasingly popular technique for verifying software functionalities and finding
security vulnerabilities. However, current mutation-based fuzzers cannot effectively test …

Finding bugs in database systems via query partitioning

M Rigger, Z Su - Proceedings of the ACM on Programming Languages, 2020 - dl.acm.org
Logic bugs in Database Management Systems (DBMSs) are bugs that cause an incorrect
result for a given query, for example, by omitting a row that should be fetched. These bugs …

Testing database engines via pivoted query synthesis

M Rigger, Z Su - 14th USENIX Symposium on Operating Systems …, 2020 - usenix.org
Database Management Systems (DBMSs) are used widely, and have been extensively
tested by fuzzers, which are successful in finding crash bugs. However, approaches to …

Detecting optimization bugs in database engines via non-optimizing reference engine construction

M Rigger, Z Su - Proceedings of the 28th ACM Joint Meeting on …, 2020 - dl.acm.org
Database Management Systems (DBMS) are used ubiquitously. To efficiently access data,
they apply sophisticated optimizations. Incorrect optimizations can result in logic bugs, which …

Griffin: Grammar-free DBMS fuzzing

J Fu, J Liang, Z Wu, M Wang, Y Jiang - Proceedings of the 37th IEEE …, 2022 - dl.acm.org
Fuzzing is a promising approach to DBMS testing. One crucial component in DBMS fuzzing
is grammar: since DBMSs enforce strict validation on inputs, a grammar improves fuzzing …

Detecting logical bugs of {DBMS} with coverage-based guidance

Y Liang, S Liu, H Hu - … USENIX Security Symposium (USENIX Security 22 …, 2022 - usenix.org
Database management systems (DBMSs) are critical components of modern data-intensive
applications. Developers have adopted many testing techniques to detect DBMS bugs such …

Testing database engines via query plan guidance

J Ba, M Rigger - 2023 IEEE/ACM 45th International Conference …, 2023 - ieeexplore.ieee.org
Database systems are widely used to store and query data. Test oracles have been
proposed to find logic bugs in such systems, that is, bugs that cause the database system to …

{DynSQL}: Stateful Fuzzing for Database Management Systems with Complex and Valid {SQL} Query Generation

ZM Jiang, JJ Bai, Z Su - 32nd USENIX Security Symposium (USENIX …, 2023 - usenix.org
Database management systems (DBMSs) are essential parts of modern software. To ensure
the security of DBMSs, recent approaches apply fuzzing to testing DBMSs by automatically …

Testing graph database engines via query partitioning

M Kamm, M Rigger, C Zhang, Z Su - Proceedings of the 32nd ACM …, 2023 - dl.acm.org
Graph Database Management Systems (GDBMSs) store data as graphs and allow the
efficient querying of nodes and their relationships. Logic bugs are bugs that cause a GDBMS …

One engine to fuzz'em all: Generic language processor testing with semantic validation

Y Chen, R Zhong, H Hu, H Zhang… - … IEEE Symposium on …, 2021 - ieeexplore.ieee.org
Language processors, such as compilers and interpreters, are indispensable in building
modern software. Errors in language processors can lead to severe consequences, like …