It is not Only About Control Dependent Nodes: Basic Block Coverage for Search-Based Crash Reproduction

Research output: Chapter in Book/Conference proceedings/Edited volumeConference contributionScientificpeer-review

1 Citation (Scopus)
20 Downloads (Pure)


Search-based techniques have been widely used for white-box test generation. Many of these approaches rely on the approach level and branch distance heuristics to guide the search process and generate test cases with high line and branch coverage. Despite the positive results achieved by these two heuristics, they only use the information related to the coverage of explicit branches (e.g., indicated by conditional and loop statements), but ignore potential implicit branchings within basic blocks of code. If such implicit branching happens at runtime (e.g., if an exception is thrown in a branchless-method), the existing fitness functions cannot guide the search process. To address this issue, we introduce a new secondary objective, called Basic Block Coverage (BBC), which takes into account the coverage level of relevant basic blocks in the control flow graph. We evaluated the impact of BBC on search-based crash reproduction because the implicit branches commonly occur when trying to reproduce a crash, and the search process needs to cover only a few basic blocks (i.e., blocks that are executed before crash happening). We combined BBC with existing fitness functions (namely STDistance and WeightedSum) and ran our evaluation on 124 hard-to-reproduce crashes. Our results show that BBC, in combination with STDistance and WeightedSum, reproduces 6 and 1 new crashes, respectively. BBC significantly decreases the time required to reproduce 26.6% and 13.7% of the crashes using STDistance and WeightedSum, respectively. For these crashes, BBC reduces the consumed time by 44.3% (for STDistance) and 40.6% (for WeightedSum) on average.
Original languageEnglish
Title of host publicationSearch-Based Software Engineering - 12th International Symposium, SSBSE 2020
EditorsAldeida Aleti, Annibale Panichella
Number of pages16
ISBN (Electronic)978-3-030-59762-7
ISBN (Print)978-3-030-59761-0
Publication statusPublished - Oct 2020
Event12th Symposium on Search-Based Software Engineering - Online, Italy
Duration: 7 Oct 20208 Oct 2020
Conference number: 12

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume12420 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference12th Symposium on Search-Based Software Engineering
Abbreviated titleSSBSE 2020
Internet address


  • Automated crash reproduction
  • Evolutionary algorithm
  • Search-based software testing
  • Secondary objective


Dive into the research topics of 'It is not Only About Control Dependent Nodes: Basic Block Coverage for Search-Based Crash Reproduction'. Together they form a unique fingerprint.

Cite this