SymJS: automatic symbolic testing of JavaScript web applications

Li, Guodong; Andreasen, Esben; Ghosh, Indradeep

doi:10.1145/2635868.2635913

Cited by 84 publications

(57 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Sen et al [31] presented Jalangi, a tool based on program instrumentation and concolic values. Li and Ghosh [23] and Li et al [22] describe a custom browser and symbolic execution engine for JavaScript and the browser DOM, and a string constraint solver PASS with support for most JavaScript string operations. Although all of these approaches feature some support for ECMAScript regex (such as limited support for capture groups), they ignore matching precedence and do not support backreferences or lookaheads.…”

Section: Related Workmentioning

confidence: 99%

Sound regular expression semantics for dynamic symbolic execution of JavaScript

Loring

Mitchell

Kinder

2019

Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation

View full text Add to dashboard Cite

Support for regular expressions in symbolic execution-based tools for test generation and bug finding is insufficient. Common aspects of mainstream regular expression engines, such as backreferences or greedy matching, are ignored or imprecisely approximated, leading to poor test coverage or missed bugs. In this paper, we present a model for the complete regular expression language of ECMAScript 2015 (ES6), which is sound for dynamic symbolic execution of the test and exec functions. We model regular expression operations using string constraints and classical regular expressions and use a refinement scheme to address the problem of matching precedence and greediness. We implemented our model in ExpoSE, a dynamic symbolic execution engine for JavaScript, and evaluated it on over 1,000 Node.js packages containing regular expressions, demonstrating that the strategy is effective and can significantly increase the number of successful regular expression queries and therefore boost coverage.CCS Concepts • Software and its engineering → Software verification and validation; Dynamic analysis; • Theory of computation → Regular languages.

show abstract

Section: Related Workmentioning

confidence: 99%

Sound regular expression semantics for dynamic symbolic execution of JavaScript

Loring

Mitchell

Kinder

2019

Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation

View full text Add to dashboard Cite

show abstract

“…These techniques are complementary to CDT as they generate tests that CDT can use. In software engineering, testing and test generation work is quite extensive (e.g., [8,22,27,42,50,53,54,55,72,84,88]). However, unlike CDT, this work has focused neither on data testing, nor query generation.…”

Section: Related Workmentioning

confidence: 99%

Preventing data errors with continuous testing

Muşlu

Brun

Meliou

2015

Proceedings of the 2015 International Symposium on Software Testing and Analysis

View full text Add to dashboard Cite

Today, software systems that rely on data are ubiquitous, and ensuring the data's quality is an increasingly important challenge as data errors result in annual multi-billion dollar losses. While software debugging and testing have received heavy research attention, less effort has been devoted to data debugging: identifying system errors caused by well-formed but incorrect data. We present continuous data testing (CDT), a low-overhead, delay-free technique that quickly identifies likely data errors. CDT continuously executes domain-specific test queries; when a test fails, CDT unobtrusively warns the user or administrator. We implement CDT in the CON-TEST prototype for the PostgreSQL database management system. A feasibility user study with 96 humans shows that CONTEST was extremely effective in a setting with a data entry application at guarding against data errors: With CONTEST, users corrected 98.4% of their errors, as opposed to 40.2% without, even when we injected 40% false positives into CONTEST's output. Further, when using CONTEST, users corrected data entry errors 3.2 times faster than when using state-of-the-art methods.

show abstract

“…SymJS [48] is a recent framework for automatic testing of JavaScript code. It contains a symbolic execution engine for JavaScript, and an automatic event explorer.…”

Section: Symbolic Execution and Concolic Testingmentioning

confidence: 99%

Advances in Testing JavaScript-Based Web Applications

Mesbah

2015

Advances in Computers

View full text Add to dashboard Cite

SymJS: automatic symbolic testing of JavaScript web applications

Cited by 84 publications

References 31 publications

Sound regular expression semantics for dynamic symbolic execution of JavaScript

Sound regular expression semantics for dynamic symbolic execution of JavaScript

Preventing data errors with continuous testing

Advances in Testing JavaScript-Based Web Applications

Contact Info

Product

Resources

About