Metamong: Detecting Render-Update Bugs in Web Browsers through Fuzzing

Abstract

A render-update bug arises when a web browser produces an erroneous rendering output due to incorrect rendering updates. Such render-update bugs seriously harm the usability and reliability of web browsers. However, we find that detecting render-update bugs is challenging because the render-update bug is a semantic bug - given a rendering result, it is difficult to determine if it is correct due to the complex rendering specification of DOM and CSS. Thus, unlike memory corruption bugs, the incorrect rendering output does not raise the violation or crash. In practice, render-update bug detection relies on the time-prohibitive manual analysis of domain experts to determine the bug.

BibTeX

@inproceedings{Song-Lee:FSE23,
  author    = {Suhwan Song and
               Byoungyoung Lee},
  title     = {Metamong: Detecting {Render-Update} Bugs in Web Browsers through Fuzzing},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {1075--1087},
  publisher = {{ACM}},
  year      = {2023},
}

Metamong: Detecting Render-Update Bugs in Web Browsers through Fuzzing

Abstract

Related papers