---
格式版本: 2
标题: "SNIPTEST: Fuzzing Multi-Level Code Slices for Validating Vulnerabilities"
原文链接: "https://arxiv.org/abs/2608.17396"
发布日期: "2026-08-18"
发布时间校准状态: "found"
发布时间需复核: "否"
发布时间来源: "rule:local:strict_original_body"
发布时间证据: "**\\[v1\\]** Tue, 18 Aug 2026 05:47:13 UTC (5,159 KB)"
发布时间校准原因: "规则确认唯一严格发布时间，来源 local:strict_original_body"
发布时间校准置信度: "high"
发布时间候选数量: 18
发布时间严格候选数量: 6
发布时间原页读取状态: "source template page reused from URL open"
发布时间未找到原因: ""
发布时间校准时间: "2026-08-20T14:43:17+08:00"
发布时间仲裁状态: "skipped"
发布时间仲裁尝试次数: 0
发布时间仲裁耗时毫秒: 0
发现时间: "2026-08-20T14:38:42+08:00"
入库时间: "2026-08-20T06:43:17.686Z"
来源平台: "arXiv 学术论文搜索"
搜索渠道: "source_template"
搜索词: "https://arxiv.org/search/?query=Oracle&searchtype=all"
匹配关键词:
  []
相关厂家:
  - "Oracle"
相关专家:
  []
内容类型: "网页"
抓取工具: "Free Fetch + Defuddle"
清洗工具: "Defuddle Markdown + Defuddle/Readability 正文提取"
原始附件:
  []
AI优质: "否"
AI打分: 10
AI分档: "非优质"
AI质检状态: "不通过"
AI打分理由: "该论文为软件工程漏洞验证方向，与超节点、AI Rack、机柜级AI基础设施、供电散热互连等主题完全无关，仅因搜索词Oracle命中，无任何相关技术或商业信息。"
AI质检模型: "ali-deepseek-v4-flash"
AI质检时间: "2026-08-20T14:46:55+08:00"
AI主题相关性: 0
AI来源权威性: 5
AI新颖性: 0
AI技术细节: 0
AI商业部署信号: 0
AI完整性: 5
AI摘要: "SNIPTEST 提出一种基于执行的静态分析告警分流框架，围绕告警位置生成并模糊测试编译后的多层代码切片，以验证漏洞真实性。"
AI摘要模型: "ali-deepseek-v4-flash"
AI摘要时间: "2026-09-07T03:22:14.505Z"
采集批次: "2026年8月20日14点19分32秒"
采集批次ID: "20260820-141932-079"
去重键: "https://arxiv.org/abs/2608.17396"
---

## Computer Science > Software Engineering

## Title:SNIPTEST: Fuzzing Multi-Level Code Slices for Validating Vulnerabilities

[View PDF](https://arxiv.org/pdf/2608.17396) [HTML (experimental)](https://arxiv.org/html/2608.17396v1)

> Abstract:Modern software systems are increasingly complex, and static analysis tools are commonly used to identify potentially vulnerable code by issuing warnings. However, these warnings often require manual inspection to confirm whether the reported issues are real, making the process time-consuming and error-prone. Directed fuzzing has emerged as a powerful automated technique to validate the warnings. However, applying it to the entire project in response to each warning is computationally infeasible, often requiring days of execution to achieve only incremental improvements in code coverage.  
> We present SNIPTEST, an execution-based warning triage framework that generates and fuzzes compiled code slices centered around static-analysis warnings. Rather than proving exploitability in the full program, SNIPTEST provides evidence about how a warning behaves under progressively expanded sliced execution contexts. It employs a layer-by-layer slicing strategy, incrementally expanding context around the target location to validate potential vulnerabilities with increasing precision. We evaluate SNIPTEST on a benchmark of 97 true vulnerabilities and 97 false alarms across three real-world projects. SNIPTEST produces Possible True Positive evidence for 53 of 97 confirmed vulnerabilities (54.6%) by triggering the corresponding bug oracle consistently across all three analyzed slice levels, while the remaining cases are unreachable. Particularly, in 40.2% of these cases, it exploits the vulnerability along the observed execution path, matching the top three stack frames. On the 97 confirmed false alarms, SNIPTEST produces Possible False Positive evidence for 54 cases (55.6%) by reaching the warning without triggering the bug oracle, but misclassifies 28 cases (28.8%),and the remaining cases are unreached. Finally, we demonstrate the practical relevance of SNIPTEST by identifying CVE-2025-11964.

| Subjects: | Software Engineering (cs.SE) |
| --- | --- |
| Cite as: | [arXiv:2608.17396](https://arxiv.org/abs/2608.17396) \[cs.SE\] |
|  | (or [arXiv:2608.17396v1](https://arxiv.org/abs/2608.17396v1) \[cs.SE\] for this version) |
|  | [https://doi.org/10.48550/arXiv.2608.17396](https://doi.org/10.48550/arXiv.2608.17396) |

## Submission history

From: Aniruddhan Murali \[[view email](https://arxiv.org/show-email/88f3f486/2608.17396)\]  
**\[v1\]** Tue, 18 Aug 2026 05:47:13 UTC (5,159 KB)

[Which authors of this paper are endorsers?](https://arxiv.org/auth/show-endorsers/2608.17396) | Disable MathJax ([What is MathJax?](https://info.arxiv.org/help/mathjax.html))