{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:2CF3ZJ42V6UGRYTJ3Z4BCXYMLE","short_pith_number":"pith:2CF3ZJ42","canonical_record":{"source":{"id":"2007.02314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-05T12:32:27Z","cross_cats_sorted":[],"title_canon_sha256":"5616443ed87ce87e99fb98d1ad34f4dae74ce8e623104004a904de80ee028251","abstract_canon_sha256":"89df0056f3d7681be92dec07b9d07eea90380334e7870ffacbdae68f6f08cbaa"},"schema_version":"1.0"},"canonical_sha256":"d08bbca79aafa868e269de78115f0c591357f942ccf4fc3bf7c767b9f8633026","source":{"kind":"arxiv","id":"2007.02314","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.02314","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"arxiv_version","alias_value":"2007.02314v1","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.02314","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_12","alias_value":"2CF3ZJ42V6UG","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_16","alias_value":"2CF3ZJ42V6UGRYTJ","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_8","alias_value":"2CF3ZJ42","created_at":"2026-07-05T01:16:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:2CF3ZJ42V6UGRYTJ3Z4BCXYMLE","target":"record","payload":{"canonical_record":{"source":{"id":"2007.02314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-05T12:32:27Z","cross_cats_sorted":[],"title_canon_sha256":"5616443ed87ce87e99fb98d1ad34f4dae74ce8e623104004a904de80ee028251","abstract_canon_sha256":"89df0056f3d7681be92dec07b9d07eea90380334e7870ffacbdae68f6f08cbaa"},"schema_version":"1.0"},"canonical_sha256":"d08bbca79aafa868e269de78115f0c591357f942ccf4fc3bf7c767b9f8633026","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:16:21.156055Z","signature_b64":"1pfDdLqK4QHVfXH7rRVaPScSviBoRWCtejtN/q/2ziIJ2mmmvSIJ44uhdXWCcW/VvPQRSvsOLRku0hfNqC2oCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d08bbca79aafa868e269de78115f0c591357f942ccf4fc3bf7c767b9f8633026","last_reissued_at":"2026-07-05T01:16:21.155641Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:16:21.155641Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.02314","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:16:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tVPvursWv8wnzKKUJD8ikPNhXl07Qx9AUxR0g047ndlCL5MppL9x7i7CsHCIMckVFmaV11UR119UJRmK3XuFDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:50:38.014418Z"},"content_sha256":"6bfd57f29f0f7e68819c49d2031257e7530a1c54f8b1e4bd4178c12909366f67","schema_version":"1.0","event_id":"sha256:6bfd57f29f0f7e68819c49d2031257e7530a1c54f8b1e4bd4178c12909366f67"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:2CF3ZJ42V6UGRYTJ3Z4BCXYMLE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Static Detection of Uninitialized Stack Variables in Binary Code","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz","submitted_at":"2020-07-05T12:32:27Z","abstract_excerpt":"More than two decades after the first stack smashing attacks, memory corruption vulnerabilities utilizing stack anomalies are still prevalent and play an important role in practice. Among such vulnerabilities, uninitialized variables play an exceptional role due to their unpleasant property of unpredictability: as compilers are tailored to operate fast, costly interprocedural analysis procedures are not used in practice to detect such vulnerabilities. As a result, complex relationships that expose uninitialized memory reads remain undiscovered in binary code. Recent vulnerability reports show "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.02314","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.02314/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:16:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uhty8Wz0gEfEVvdyxo58+WO6Km6XZDsKZ5/maCB+Wx1HqflLpyvTlGXZrH6BfHf6PI3dZIe0hacC/Ipxj+5gDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:50:38.014790Z"},"content_sha256":"3abc8a58b1b9f78aded0c8d3acc5d0ab313627c436d7733aa9cb209480b1323d","schema_version":"1.0","event_id":"sha256:3abc8a58b1b9f78aded0c8d3acc5d0ab313627c436d7733aa9cb209480b1323d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/bundle.json","state_url":"https://pith.science/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:50:38Z","links":{"resolver":"https://pith.science/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE","bundle":"https://pith.science/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/bundle.json","state":"https://pith.science/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2CF3ZJ42V6UGRYTJ3Z4BCXYMLE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:2CF3ZJ42V6UGRYTJ3Z4BCXYMLE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"89df0056f3d7681be92dec07b9d07eea90380334e7870ffacbdae68f6f08cbaa","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-05T12:32:27Z","title_canon_sha256":"5616443ed87ce87e99fb98d1ad34f4dae74ce8e623104004a904de80ee028251"},"schema_version":"1.0","source":{"id":"2007.02314","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.02314","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"arxiv_version","alias_value":"2007.02314v1","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.02314","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_12","alias_value":"2CF3ZJ42V6UG","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_16","alias_value":"2CF3ZJ42V6UGRYTJ","created_at":"2026-07-05T01:16:21Z"},{"alias_kind":"pith_short_8","alias_value":"2CF3ZJ42","created_at":"2026-07-05T01:16:21Z"}],"graph_snapshots":[{"event_id":"sha256:3abc8a58b1b9f78aded0c8d3acc5d0ab313627c436d7733aa9cb209480b1323d","target":"graph","created_at":"2026-07-05T01:16:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.02314/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"More than two decades after the first stack smashing attacks, memory corruption vulnerabilities utilizing stack anomalies are still prevalent and play an important role in practice. Among such vulnerabilities, uninitialized variables play an exceptional role due to their unpleasant property of unpredictability: as compilers are tailored to operate fast, costly interprocedural analysis procedures are not used in practice to detect such vulnerabilities. As a result, complex relationships that expose uninitialized memory reads remain undiscovered in binary code. Recent vulnerability reports show ","authors_text":"Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-05T12:32:27Z","title":"Static Detection of Uninitialized Stack Variables in Binary Code"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.02314","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6bfd57f29f0f7e68819c49d2031257e7530a1c54f8b1e4bd4178c12909366f67","target":"record","created_at":"2026-07-05T01:16:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"89df0056f3d7681be92dec07b9d07eea90380334e7870ffacbdae68f6f08cbaa","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-05T12:32:27Z","title_canon_sha256":"5616443ed87ce87e99fb98d1ad34f4dae74ce8e623104004a904de80ee028251"},"schema_version":"1.0","source":{"id":"2007.02314","kind":"arxiv","version":1}},"canonical_sha256":"d08bbca79aafa868e269de78115f0c591357f942ccf4fc3bf7c767b9f8633026","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d08bbca79aafa868e269de78115f0c591357f942ccf4fc3bf7c767b9f8633026","first_computed_at":"2026-07-05T01:16:21.155641Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:16:21.155641Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1pfDdLqK4QHVfXH7rRVaPScSviBoRWCtejtN/q/2ziIJ2mmmvSIJ44uhdXWCcW/VvPQRSvsOLRku0hfNqC2oCA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:16:21.156055Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.02314","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6bfd57f29f0f7e68819c49d2031257e7530a1c54f8b1e4bd4178c12909366f67","sha256:3abc8a58b1b9f78aded0c8d3acc5d0ab313627c436d7733aa9cb209480b1323d"],"state_sha256":"3002def8b847281f7c66b735c31abbd4ece304a306145ef0971456ea77d625ec"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ny/j2DccguRPTg3nB3C/7M3veFnA5A1uST0t28ApvKfSZrsNJx8p5TTYqPXasO+6ZIz/K94mRC6D7sBGiQGMBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:50:38.016670Z","bundle_sha256":"2ad732dc1d2084c62656af8506e0de67983a99dd81707b0ae661d0c8d6d33ad3"}}