Publications

CLower: Detecting Compiler Pessimization Bugs through Redundant Memory Accesses
Cross-Version Detection for Compiler-Introduced Vulnerabilities (Chinese)
Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs
WarpAttack: Bypassing CFI with Compiler-Introduced double-fetch
POMP++: Facilitating Postmortem Program Diagnosis with Value-set Analysis