2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST) 2020
DOI: 10.1109/icst46399.2020.00022
|View full text |Cite
|
Sign up to set email alerts
|

NodeRacer: Event Race Detection for Node.js Applications

Abstract: The Node.js platform empowers a huge number of software systems programmed with JavaScript. Node.js employs an asynchronous execution model where event handlers are scheduled nondeterministically, and unexpected races between event handlers often cause malfunctions. Existing techniques for detecting such event races require complex modifications of the Node.js internals, or target only certain kinds of races.This paper presents a new approach, called NODERACER, that detects event races in Node.js applications … Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1

Citation Types

0
4
0

Year Published

2021
2021
2024
2024

Publication Types

Select...
4
3

Relationship

0
7

Authors

Journals

citations
Cited by 20 publications
(4 citation statements)
references
References 30 publications
0
4
0
Order By: Relevance
“…In addition, current detection tools focus mainly on languages like Java, Python and Ruby. Searching through the different resources and the recent literature surveys on flaky tests [36], [37], we found only one tool, NodeRacer [38], that aims to manifest test flakiness causes by event races in JavaScript programs. There is related work on detecting other concurrency issues in JavaScript programs such as NRace [39] or atomicity violations, NodeAV [40].…”
Section: Discussionmentioning
confidence: 99%
“…In addition, current detection tools focus mainly on languages like Java, Python and Ruby. Searching through the different resources and the recent literature surveys on flaky tests [36], [37], we found only one tool, NodeRacer [38], that aims to manifest test flakiness causes by event races in JavaScript programs. There is related work on detecting other concurrency issues in JavaScript programs such as NRace [39] or atomicity violations, NodeAV [40].…”
Section: Discussionmentioning
confidence: 99%
“…Shaker [37] exposes flakiness by adding noise to the environment in the form of tasks that also stress the CPU and memory whilst the test suite is executed. NodeRacer [38] is a tool for JavaScript programs running on node.js with which accelerates manifestation of event races that can cause test flakiness. It uses instrumentation and builds a model consisting of a happens-after relation for callbacks.…”
Section: A Flaky Test Detection Techniquesmentioning
confidence: 99%
“…This work does not focus on the arbitrary command execution or arbitrary code execution vulnerabilities in the low layer of Node.js (i.e., binding module layer and dependency module layer). Race conditions [39], DOS attacks (such as regular expression DoS) [40,41], hidden property abuse [42] in Node.js applications, and global variable alterations are also out of the scope of this work, as these attacks are usually triggered without invoking system calls. Installtime attacks [43] is out of the scope of this work since the attacks are triggered during the installation.…”
Section: Threat Modelmentioning
confidence: 99%
“…Installtime attacks [43] is out of the scope of this work since the attacks are triggered during the installation. Moreover, these can be addressed by complementary techniques [20,[39][40][41][42][43][44].…”
Section: Threat Modelmentioning
confidence: 99%