We apply for the following badges:
The artifact is archived on Zenodo with a persistent DOI: todoxxx. The repository is publicly accessible and includes all source code, scripts, datasets, and documentation needed to use and extend CrossFit.
The artifact includes:
- A Docker environment that builds and runs all components in under 30 minutes.
- Automated scripts (
scripts/) to build targets, run fuzzing campaigns, and collect coverage results. - A 150-PoC benchmark (
dataset/) for validating and triaging discovered crashes.
Key results from the paper (Table 2: callsite coverage, Table 3: newly found bugs) can be reproduced using the provided scripts and instructions.
The artifact is designed for reuse and extension:
- MIT License: permissive open-source license allowing modification and redistribution.
- Modular design: the LLVM context-link analysis pass (
support/pass.cpp), the CrossFit fuzzer (fuzzer/), and the experiment scripts (scripts/) are independent components that can be used separately. - Multi-language support: CrossFit supports PHP, Python, and Ruby out of the box, with documented steps for adding new targets.