Tag
Two arm64-specific compiler miscompiles were found to induce security vulnerabilities in curl. The issue highlights how architecture-specific code generation bugs can propagate into widely used open-source software, and is being discussed on Lobsters.
The article describes methods to find missed alarm bugs in the Alive2 formal verification tool by adapting the YARPGen random program generator for differential testing.