Automatic program synthesis is a long-lasting dream in software engineering. Recently, a
promising Deep Learning (DL) based solution, called Copilot, has been proposed by …

Automated Program Repair (APR) is one of the most recent advances in automated
debugging, and can directly fix buggy programs with minimal human intervention. Although …

Static analysis examines code in the absence of input data and without running the code. It
can detect potential security violations (SQL injection), runtime errors (dereferencing a null …

Heap data is potentially unbounded and seemingly arbitrary. Hence, unlike stack and static
data, heap data cannot be abstracted in terms of a fixed set of program variables. This …

Static analysis (SA) tools can generate useful static warnings to reveal the problematic code
snippets in a software system without dynamically executing the corresponding source code …

Although it has been studied for several years by computer vision and machine learning
communities, image annotation is still far from practical. In this paper, we present …

When dealing with millions of lines of code, we still cannot have the cake and eat it: sparse
value-flow analysis is powerful in checking source-sink problems, but existing work cannot …

This paper introduces the Checker Framework, which supports adding pluggable type
systems to the Java language in a backward-compatible way. A type system designer …

This paper describes practical experience building and using pluggable type-checkers. A
pluggable type-checker refines (strengthens) the built-in type system of a programming …

In the summer of 2006, the FindBugs project was challenged to improve the null pointer
analysis in FindBugs so that we could find more null pointer bugs. In particular, we were …