Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question about Dataset(Resource 2, 3) #10

Open
programsurf opened this issue Dec 5, 2024 · 0 comments
Open

Question about Dataset(Resource 2, 3) #10

programsurf opened this issue Dec 5, 2024 · 0 comments

Comments

@programsurf
Copy link

I have a question.

It is related to the paper "Cross-Modality Mutual Learning for Enhancing Smart Contract Vulnerability Detection on Bytecode".

1. In Table 4 of APPENDIX B of the paper, IO.contract is 1,368/7,183. However, when looking at the data of resource 2 of this repository, there are only 275 Integeroverflows. Why is there a difference? Which data is uploaded?

2. The ground truth label in resource 2 says that manual verification is performed after the instruction. How did you perform the manual verification? Did you check that SafeMath and require were included without exception? Are there any other criteria that you considered?

This time, it is related to "Rethinking Smart Contract Fuzzing: Fuzzing With Invocation Ordering and Important Branch Revisiting".

3. In the ground_turth_label.csv of resource 3, the 9.sol file (contract name: WWW) of the Integer Overflow/Underflow sheet is set as ground truth 1. Is there a reason why it is set to 1?

Both function "transfer" and "transferFrom" have "require", which is a guard for the minus operation, and in the case of the plus operation, it is limited to a constant in the constructor, so it seems that overflow does not occur, so I am asking a question.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant