{
  "added_at": "2026-10-20",
  "arxiv_id": "2610.25071",
  "arxiv_version_reviewed": "v1",
  "authors": [
    "Huaijin Wang",
    "Tongda Wang",
    "Zhibo Liu",
    "Yue Zhang",
    "Shuai Wang",
    "Pengfei Hu",
    "Jianzhong Liu",
    "Fangtian Zhong",
    "Shaohua Wang"
  ],
  "bibtex_url": "https://awesomerea.org/papers/citations/paper-patchalign.bib",
  "code_url": null,
  "date_basis": "First arXiv v1 submission; no formal venue publication was verified.",
  "date_basis_zh": "采用 arXiv v1 首次提交日期；未核实正式会议或期刊出版。",
  "date_precision": "day",
  "description_en": "Locates patch-relevant code in stripped binaries using instruction-aligned retrieval and caller/callee context, then uses an LLM to screen candidate matches and compare patch-specific behavior with vulnerable and patched references.",
  "description_zh": "结合指令对齐检索及调用者／被调用者上下文，在剥离符号的二进制中定位补丁相关代码，再由 LLM 筛选候选匹配并对照漏洞版与修复版参考程序判断补丁特定行为。",
  "doi": "10.48550/arxiv.2610.25071",
  "entry_url": "https://awesomerea.org/papers/paper-patchalign/",
  "entry_url_zh": "https://awesomerea.org/zh/papers/paper-patchalign/",
  "evidence_urls": [
    "https://arxiv.org/abs/2610.25071",
    "https://arxiv.org/html/2610.25071v1",
    "https://api.datacite.org/dois/10.48550/arxiv.2610.25071"
  ],
  "first_arxiv_date": "2026-10-18",
  "id": "paper-patchalign",
  "json_url": "https://awesomerea.org/papers/paper-patchalign/record.json",
  "kind": "research",
  "markdown_url": "https://awesomerea.org/papers/paper-patchalign/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/papers/paper-patchalign/index.md",
  "metadata_notes": "Reviewed the nine-author v1 abstract and full text. The article uses the arXiv non-exclusive license. Its data-availability section promises code, models, data and instructions upon publication; no paper-specific public artifact or artifact license was verified in the reviewed text and focused search. Cited baseline tools are not the PatchAlign release. DataCite registered the matching arXiv DOI on 2026-10-20, despite the abstract page still saying pending.",
  "metadata_notes_zh": "已审阅九位作者的 v1 摘要与全文。文章采用 arXiv 非独占许可。数据可用性部分承诺在出版时发布代码、模型、数据及说明；所审阅全文和定向检索未核实论文专属公开产物或其许可，引用的基线工具不等于 PatchAlign 发布。DataCite 于 2026-10-20 登记匹配的 arXiv DOI，尽管摘要页仍标为待注册。",
  "pdf_url": "https://arxiv.org/pdf/2610.25071v1",
  "project_url": null,
  "publication_date": "2026-10-18",
  "publication_status": "preprint",
  "record_type": "paper",
  "runtime_tested": false,
  "scope_limitations_en": "Requires the known source patch and vulnerable/patched reference binaries; it is not source recovery or undisclosed-vulnerability discovery. Evaluation covers 62 CVEs from four C/C++ projects, 124 reference and 496 target binaries, restricted to x86-64, GCC/Clang configurations and one reported reasoning model. Balanced labels do not reproduce deployment prevalence; public patches may be in training data. Uncertain and missing-localization outcomes are reported separately, but binary metrics map them to vulnerable and negative outcomes, respectively; selected accuracy excludes both.",
  "scope_limitations_zh": "需要已知源码补丁以及漏洞版／修复版参考二进制，并非源码恢复或未公开漏洞发现。评测覆盖四个 C/C++ 项目的 62 个 CVE、124 个参考二进制及 496 个目标二进制，限于 x86-64、指定 GCC／Clang 配置和一个报告的推理模型。标签平衡不代表实际部署分布；公开补丁可能出现在训练数据中。不确定与定位失败结果虽单独报告，但二分类指标分别将其计为仍有漏洞的正类及负类；选定子集准确率则排除两者。",
  "targets": [
    "binary"
  ],
  "title": "Locate, Then Reason: End-to-End Patch Presence Testing in Stripped Binaries",
  "title_zh": "先定位再推理：剥离符号二进制中的端到端补丁存在性测试",
  "url": "https://arxiv.org/abs/2610.25071",
  "venue": "arXiv",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20",
  "why_fits_en": "Studies evidence-guided localization and semantic comparison of binary code, including the limits of decompiler-inferred types when judging small fixes.",
  "why_fits_zh": "研究由证据引导的二进制代码定位与语义比较，并展示反编译器推断类型在判断小规模修复时的局限。",
  "year": 2026
}