On my way to Savannah, Georgia to an IFIP WG 4.3 meeting, where Iโll present our work on Parameterized Compiler Testing (a joint work with my fantastic co-workers Addison Crump and Alexi Turcotte)
01.03.2026 09:45 โ ๐ 2 ๐ 0 ๐ฌ 0 ๐ 0@andreaszeller.bsky.social
Software researcher at https://cispa.de, working on #Fandango, #S3, #FuzzingBook, #DebuggingBook. Testing, debugging, analyzing, and protecting software for a better world. Find me at https://andreas-zeller.info/
On my way to Savannah, Georgia to an IFIP WG 4.3 meeting, where Iโll present our work on Parameterized Compiler Testing (a joint work with my fantastic co-workers Addison Crump and Alexi Turcotte)
01.03.2026 09:45 โ ๐ 2 ๐ 0 ๐ฌ 0 ๐ 0
#Fandango 1.1 is now available! With this release, #Fandango becomes a full-fledged _protocol fuzzer_, happily exploring states and messages of protocols such as FTP or DNS. Thanks to Josรฉ. Valentin, Alexander, and Marius for their hard work!
Find Fandango at fandango-fuzzer.github.io
Andreas Zeller and PhD students
About time: A multi-celebration for becoming a member of Academia Europaea, my SIGSOFT Influential Educator Award, my 60th birthday, becoming an IEEE Fellow, _and_ getting the 2026 IEEE Harlan D. Mills Award. With cake and fizzy drinks!
16.02.2026 08:03 โ ๐ 13 ๐ 1 ๐ฌ 0 ๐ 0Starting this year, I will only review for conferences that get rid of a "bidding" phase, as allowing reviewers to bid on papers they want to review opens too many opportunities for manipulation and collusion. For details, see andreas-zeller.info/2025/12/07/R... #nobidding
10.02.2026 08:37 โ ๐ 9 ๐ 0 ๐ฌ 1 ๐ 0
I am happy to report that I have been named the recipient of the
2026 Harlan D. Mills award
"For sustained contributions to software debugging, program analysis, mining software repositories, and automated test generation." This is a big award โย thanks to all!
www.computer.org/volunteering...
Fault localization aims to identify code regions responsible for failures. Traditional techniques primarily correlate statement execution with failures; however, program behavior involves diverse execution features, including variable values, branch conditions, and definition-use pairs, which can provide richer diagnostic insights. This paper comprehensively investigates execution features for fault understanding, addressing two complementary goals. First, we conduct an empirical study of 310 bugs across 20 projects, analyzing 17 execution features and assessing their correlation with failure outcomes. Our findings suggest that fault localization benefits from a broader range of execution features: (1) Scalar pairs exhibit the strongest correlation with failures; (2) Beyond line executions, def-use pairs and functions executed are key indicators for fault localization; and (3) Combining multiple features enhances effectiveness compared to relying on individual features. Second, building on these insights, we introduce a debugging approach that learns relevant features from labeled test outcomes. The approach extracts fine-grained execution features and trains a decision tree to differentiate passing and failing runs. The trained model generates fault diagnoses that explain the underlying causes of failures. Our evaluation demonstrates that the generated diagnoses achieve high predictive accuracy. These interpretable diagnoses empower developers to debug software efficiently by providing deeper insights into failures.
How do execution features relate to failures? In this new ACM TOSEM paper, Marius Smytzek, Martin Eberlein, Lars Grunske, and I analyze which execution features beyond code coverage correlate best with failures and lead to accurate explanations of failure causes: dl.acm.org/doi/10.1145/...
03.02.2026 10:10 โ ๐ 7 ๐ 0 ๐ฌ 0 ๐ 1Four hours later, I _think_ I have fixed things again - reinstalled Python and all its packages, rebuilt Spotlight and Mail indexes, cleared macOS caches, subscribed to Creator Studio, and now back to these lost mailsโฆ Today I hate you, Apple.
30.01.2026 14:34 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0
* Mail has lost all my emails sent since Monday
* Mail search is broken too
* Search in reminders cannot find anything
* New Keynote is full of ads!?
* Invoke Python-3.13, get 3.14 instead - venvs are messed up
* LaTeX "minted" crashes (likely b/c Python)
So glad I'm an expert in debugging /sarcasm
Fuzzing software becomes much more effective if you can generate _valid_ inputs. We have now built the first approach to _statically_ extract complete and precise input grammars from parser code, producing syntactically valid and diverse inputs by construction. Enjoy! dl.acm.org/doi/10.1145/...
28.01.2026 16:05 โ ๐ 12 ๐ 4 ๐ฌ 0 ๐ 0After a visit to Max Planck Institute for Security and Privacy (MPI-SP) in Bochum, seeing my awesome colleagues @thorstenholz.bsky.social, @mboehme.bsky.social, Mathias Payer, and many more, now on my way to Paris to celebrate ten years of @softwareheritage.org with the great Roberto Di Cosmo
27.01.2026 17:52 โ ๐ 5 ๐ 0 ๐ฌ 0 ๐ 0Correction: It's 2,000+ *en*-dashes ("--"), but actually 5,800 *em*-dashes ("---")
08.01.2026 12:27 โ ๐ 5 ๐ 0 ๐ฌ 0 ๐ 0$ cd ~/Papers/ $ grep -e '[ ~]-- ' */*.tex | wc -l 2258 $
A researcher used more than 2,000 em-dashes in his papers, revealing AI-based manipulation in 400+ papers since 1985. Professor Zeller claims he "typed" these dashes into the paper by using "two hyphens" and a "typesetting" system.
08.01.2026 08:34 โ ๐ 19 ๐ 1 ๐ฌ 1 ๐ 0Fun fact: This is my tenth test of time award :-) We will give a keynote at the FSE 2026 conference. @acm.org @sigsoft.bsky.social
06.01.2026 15:56 โ ๐ 1 ๐ 0 ๐ฌ 0 ๐ 0Happy New Year! I am thrilled to report that Jacek ลliwerski, Tom Zimmermann, and I won the ACM SIGSOFT 2026 Impact Award ๐ for "When do changes induce fixes?" (MSR 2005). The paper introduced the popular SZZ algorithm for linking change histories and bug databases: dl.acm.org/doi/10.1145/...
06.01.2026 15:56 โ ๐ 16 ๐ 0 ๐ฌ 1 ๐ 0
Problem: Reviewers did not read the paper.
Solution: Write a detailed rebuttal and point to all the places in the paper that answer their questions.
New problem: Reviewers did not read the rebuttal.
The talk is now online:
* Video: www.youtube.com/watch?v=tBO_...
* Slides: andreas-zeller.info/assets/Shoul...
Enjoy! -- Andreas
In an IPN vision talk last Monday, I sketched how future AI "super-coders" would learn from their own experiments with software to far surpass current LLM-based AI coders.
The talk is now online. Enjoy!
* Recording: www.youtube.com/watch?v=tBO_...
* Slides: andreas-zeller.info/assets/Shoul...
Today at 16:00 CET, I'll give a vision talk "Should AI Coders Experiment More?", paving the way to AI โsuper codersโ that may become way more competent than the most experienced programmers - and also way more competent than any LLM-based coders. Details here: ict-research.nl/2025/11/ipn-...
15.12.2025 09:25 โ ๐ 3 ๐ 0 ๐ฌ 2 ๐ 0Time to get serious again. New blog post "Reviewer-Author Collusion Rings and How to Fight Them": andreas-zeller.info/2025/12/07/R...
08.12.2025 16:31 โ ๐ 11 ๐ 4 ๐ฌ 0 ๐ 0Oops - Of course, Helmut Kohl was chancellor until *1998*, not 1988. Apologies!
07.12.2025 19:43 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0A description of the items shown in the LaTeX Korrektor background: * Diomidis Spinellisโจ, Author ofโจ โAdvice for writing LaTeX documentsโ * LaTeX 2ฮต โจCheat Sheet * Helmut Kohlโจ, German Chancellorโจ 1982โ1988 * A fictitiousโจ event poster "Lack Leder LaTeX, Hamburg" * A fictitiousโจ LaTeX โจpropaganda โจposter
Bonus material for The LaTeX Korrektor! Some of you asked: "What are these photos and posters in the background?" Here they come, enlarged and with some details. Enjoy! #LaTeX #LaTeXKorrektor
In case you missed it, watch all six episodes of the LaTeX Korrektor here: www.youtube.com/watch?v=EhsM...
Series finale! The LaTeX Korrektor 6/6 - Ten Commandments www.youtube.com/shorts/HAodi... #LaTeX #LaTeXKorrektor
Read the LaTeX advice by Diomidis Spinellis (@coolsweng.bsky.social): github.com/dspinellis/l...
All six episodes of the LaTeX Korrektor: www.youtube.com/watch?v=EhsM...
Why, oh why does your bibliography have all titles in lowercase? WHY? The LaTeX Korrektor 5/6 - Citations: www.youtube.com/shorts/0nk72... #LaTeX #LaTeXKorrektor
Missed previous episodes? This playlist has them all: www.youtube.com/watch?v=EhsM...
Ah, so it was you who rejected my paper!? ๐ค
04.12.2025 14:03 โ ๐ 0 ๐ 0 ๐ฌ 1 ๐ 0Thanks! Did you notice the black&white photo in the background?
04.12.2025 13:59 โ ๐ 1 ๐ 0 ๐ฌ 1 ๐ 0
Can one reject papers because of bad typography? The LaTeX Korrektor 4/6 - Math Mode: www.youtube.com/shorts/mc8ro... #LaTeX #LaTeXKorrektor
Missed previous episodes? This playlist has them all: www.youtube.com/watch?v=EhsM...
Language-Based Software Testing with Josรฉ Antonio Zamudio Amaya, Marius Smytzek, Valentin Huber, Addison Crump, Alexi Turcotte, and many others Random test input generators (fuzzers) have become the prime detectors of vulnerabilities in software. While generic fuzzers easily adapt to arbitrary programs under test, they offer very little possibilities to control or shape the generated inputs. In this talk, I present FANDANGO, a novel language-based fuzzer that combines grammars with predicates over input elements to produce inputs that satisfy all the given predicates. Examples of what such predicates can express include input format constraints (โThe length field should be equal to the length of the payloadโ) code features (โAny variable used must be declared beforehandโ) statistical distributions (โAcross all inputs, the voltage field must follow a Gaussian distribution, but never exceed 20 mVโ) data collections (โThe credit-card-number field should come from the Python faker libraryโ) and more โ actually, any property that can be expressed in a Python expression. In our experiments, FANDANGO efficiently solved complex file formats and satisfied demanding predicates, up to full-fledged programming languages as test inputs for compilers. This opens the door towards personalized fuzzing, where testers can make use of their own knowledge and LLM knowledge to very effectively fuzz systems. Includes live demos! Fandango is available at https://fandango-fuzzer.github.io/ Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, holds an ACM SIGSOFT Outstanding Research Award, and has won two ERC Advanced Grants, Europeโs highest funding for individual researchers.
This Friday at 11:00 am, I will be giving a talk on "Language-Based Software Testing" at Imperial College in London, covering our latest and greatest in testing systems with highly complex inputs and interactions. Details here: srg.doc.ic.ac.uk/seminars/25-...
03.12.2025 10:52 โ ๐ 4 ๐ 0 ๐ฌ 0 ๐ 0The LaTeX Korrektor 3/6 - Vertical Space: www.youtube.com/shorts/n9iLf... #LaTeX #LaTeXKorrektor
03.12.2025 08:26 โ ๐ 5 ๐ 1 ๐ฌ 0 ๐ 0The LaTeX Korrektor 2/6 - Dashes: www.youtube.com/shorts/oDDbg...
02.12.2025 08:04 โ ๐ 9 ๐ 1 ๐ฌ 1 ๐ 0For your enjoyment: "The LaTeX Korrektor" www.youtube.com/shorts/EhsMd... #LaTeX #LaTeXKorrektor
01.12.2025 08:07 โ ๐ 10 ๐ 1 ๐ฌ 0 ๐ 0