A Comprehensive Approach to Rustc Optimization Vulnerability Detection in Industrial Control Systems

Kaifeng Xie, Jinjing Wan, Lifeng Chen and Yi Wang ()
Additional contact information
Kaifeng Xie: Department of Anthropology and Human Genetics, Fudan University, Shanghai 200433, China
Jinjing Wan: Department of Anthropology and Human Genetics, Fudan University, Shanghai 200433, China
Lifeng Chen: Department of Anthropology and Human Genetics, Fudan University, Shanghai 200433, China
Yi Wang: Department of Anthropology and Human Genetics, Fudan University, Shanghai 200433, China

Mathematics, 2025, vol. 13, issue 15, 1-20

Abstract: Compiler optimization is a critical component for improving program performance. However, the Rustc optimization process may introduce vulnerabilities due to algorithmic flaws or issues arising from component interactions. Existing testing methods face several challenges, including high randomness in test cases, inadequate targeting of vulnerability-prone regions, and low-quality initial fuzzing seeds. This paper proposes a test case generation method based on large language models (LLMs), which utilizes prompt templates and optimization algorithms to generate a code relevant to specific optimization passes, especially for real-time control logic and safety-critical modules unique to the industrial control field. A vulnerability screening approach based on static analysis and rule matching is designed to locate potential risk points in the optimization regions of both the MIR and LLVM IR layers, as well as in unsafe code sections. Furthermore, the targeted fuzzing strategy is enhanced by designing seed queues and selection algorithms that consider the correlation between optimization areas. The implemented system, RustOptFuzz, has been evaluated on both custom datasets and real-world programs. Compared with state-of-the-art tools, RustOptFuzz improves vulnerability discovery capabilities by 16%–50% and significantly reduces vulnerability reproduction time, thereby enhancing the overall efficiency of detecting optimization-related vulnerabilities in Rustc, providing key technical support for the reliability of industrial control systems.

Keywords: compiler optimization vulnerabilities; test case generation; static analysis; directed fuzz testing; Rustc (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/13/15/2459/pdf (application/pdf)
https://www.mdpi.com/2227-7390/13/15/2459/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:13:y:2025:i:15:p:2459-:d:1713529

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().