Detecting Resource Release Bugs with Analogical Reasoning

<table class="table-group" id="tab3"><tr><td><table class="table"><tr><td class="thead-hr" colspan="3"><hr/></td></tr><tr class="thead"><td class="align_left">Buggy function name</td><td class="align_center">Release function name</td><td class="align_center">Bug type</td></tr><tr><td class="thead-hr" colspan="3"><hr/></td></tr><tr><td class="align_left"><i>amdgpu_cs_wait_all_fences</i></td><td class="align_center"><i>dma_fence_put</i></td><td class="align_center">Use after free</td></tr><tr><td class="align_left"><i>raid5_end_write_request</i></td><td class="align_center"><i>raid5_release_stripe</i></td><td class="align_center">Use after free</td></tr><tr><td class="align_left"><i>dr_rule_handle_ste_branch</i></td><td class="align_center"><i>mlx5dr_htbl_put</i></td><td class="align_center">Use after free</td></tr><tr><td class="align_left"><i>of_link_to_phandle</i></td><td class="align_center"><i>of_node_put</i></td><td class="align_center">Double free</td></tr><tr><td class="align_left"><i>drm_gem_prime_import_dev</i></td><td class="align_center"><i>dma_buf_put</i></td><td class="align_center">Double free</td></tr><tr class="table-tr"><td colspan="3"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Confirmed release-related flaws.</div>

Scientific Programming

tab3

Table 3

Table 3: Detecting Resource Release Bugs with Analogical Reasoning 