Rohan Padhye

My students wrote a blog post explaining the problem with some neat examples. pastalab.org/spaghetti-be...

Ever used AI to fix tricky race conditions and flaky tests? Not pretty, is it? Check out "Spaghetti Bench 🍝: A SWE-Agent Benchmark for Concurrency Bug Tasks"

Turns out it's still a HARD problem, but it can be made tractable with deterministic replay.

pastalab.org/spaghetti-be...

SPLASH/ISSTA 2026 - Workshops - SPLASH/ISSTA 2026 Welcome to the website of the SPLASH/ISSTA 2026 conference. We are working hard to fill the website with all related information. Please check back soon! In the meantime, please consider this overview...

SPLASH and ISSTA are going to be co-located in 2026 at Oakland, CA! 🥳

If you would like to run a workshop in PL/SE/Testing, submit a proposal by Jan 10th: conf.researchr.org/track/splash...

Contact @sholtzen.bsky.social or me for questions.

⏱️ 9 days until submission deadline (Dec 11, 23:59 AoE).

Organized by: @yannicnoller.bsky.social, @rohan.padhye.org, @ruijiemeng.bsky.social, and Laszlo (@lszekeres.bsky.social) Szekeres.

From the Lab to Production: Making Cutting-Edge Testing Practical YouTube video by Antithesis

Youtube: youtu.be/oF7krd0TQks

Spotify: open.spotify.com/episode/2PH7...

Apple Podcasts: podcasts.apple.com/us/podcast/f...

Check out the latest episode of the #BugBash podcast! I had a great time chatting with David Wynn about automated testing in academia vs industry. Thanks @antithesis.com for having me on!

(of course I don't know what all the Korean words mean but hoping it's useful to find place names and food items)

Update: Mostly a success. On arrival I was able to read basic signs during my ride from 인천공항 to 서울.

Super elegant and easy to learn script! Quite compositional much like Devanagari (Sanskrit/Hindi/Marathi) which I'm already familiar with.

- 로힌

Screenshot of a Korean writing app with introductory lessons for Hangul

Excited to be on my way to ASE in Seoul! Aiming to learn some Hangul on the flight.

@aseconf.bsky.social

Gaetano's paper on Scaling Security Testing by Adressing the Reachability Gap has been accepted at #ICSE26!

📝 gpsapia.github.io/files/ICSE_2...
🧑‍💻 github.com/GPSapia/Reac...

How to scale automatic security testing to arbitrary systems?

#FUZZING'26 CALL FOR PAPERS
──────
✨ After 5 years, we will be again co-located with NDSS!

🔗 fuzzing-workshop.github.io
📅 11. Dec (Submission)

//cc @mboehme.bsky.social (MPI-SP), @ruijiemeng.bsky.social (CISPA), @rohan.padhye.org (CMU), László Szekeres (Google)

Podcast! Had a fun conversation with @cachemisses.bsky.social on an episode of *Disseminate*. Check it out!

Front page of a paper titled "Fray: An Efficient General-Purpose Concurrency Testing Platform for the JVM" by Ao Li et al. from Carnegie Mellon University.

Excited to announce that the Fray paper has been accepted to OOPSLA'25! Work led by @aoli.al with a full pastalab.org collaboration.

📄: rohan.padhye.org/files/fray-o...
💻: github.com/cmu-pasta/fray
🎥: www.youtube.com/watch?v=AX6P...

Debating whether we can add acks "We thank Reviewers A and C for their constructive feedback on our paper".

My current conjecture is that the examples of broken JSON syntax in the paper somehow accidentally caused something like second-order prompt injection in Google Scholar's indexing pipeline. But there's only one way to find out ^^^

Hilarious! It looks like Google Scholar is pulling citations for a different Kirschner et al. paper from 2006.

I wonder if one could use the technique proposed in "Debugging inputs" to identify what causes this anomaly. Gonna need Lukas to publish a *lot* of papers.

🚨 Our amazing #FUZZING'25 keynotes are online!

"Constraining Fuzzing without Paying Too Much" by Miryung Kim
youtu.be/L90MBb6NLBE

"Are you sure you belong in academia?" by Will Wilson
youtu.be/qQGuQ_4V6WI

// @mboehme.bsky.social, László Szekeres, @rohan.padhye.org, @ruijiemeng.bsky.social

The limit applies to references too? Preposterous!

Very cool: ‪@aoli.al‬ uncovered a deadlock in OpenJDK that can be triggered with a tiny test case and Fray's deterministic concurrency testing & debugging support. Read his blog post here: aoli.al/blogs/jdk-bug/

If you write Java/Scala/Kotlin, try Fray yourself: github.com/cmu-pasta/fray

Just Accepted to ACM TOSEM!

The "Havoc Paradox" is about the relationship between byte-level fuzzer mutations and their effect on the inputs produced by generators for structured strings (e.g. XML/SQL). Can disruptive mutations be controlled? Should they be? Find out.

📄 dl.acm.org/doi/pdf/10.1...

🖊️ Register here: ntnu.eventsair.com/fse2025-isst...
(FUZZING is a co-located workshop)

List of Accepted Papers at the FUZZING Workshop

We also have an excellent program of research talks and *fuzzing nuggets*. Detailed schedule coming soon.

conf.researchr.org/home/issta-2...

We're excited to announce two keynote speakers for the #FUZZING'25 workshop (part of @issta_conf at Trondheim, Norway):

[*] Will Wilson, CEO and Co-Founder of Antithesis
[*] Miryung Kim, Professor and Vice Chair of Graduate Studies at UCLA

conf.researchr.org/home/issta-2...

The JQF repo is now both popular enough (700+ stars) and contains enough buggy/vulnerable code as sample fuzz targets that we're getting occasionally spammed with crappy AI-generated patches.

I can't imagine what bigger OSS projects are dealing with right now.

Congratulations!

Delighted to receive an ACM SIGSOFT Distinguished Award for this work... It's about time!

Proud of the PASTA Lab students, including our visiting undergrads :-)

Text highlighted from a research paper that says "To the best of our knowledge, there is no existing search-based testing approach for productiongrade AV software, including [20], [21], [41]–[55] that: (i) uses our novel gene representation"

Love this argument: prior work does not use our novel idea.

Submission deadline for the Fuzzing workshop is tonight (AoE)! Send us those nuggets and research ideas.

Rohan

Paper titled "It’s About Time: An Empirical Study of Date and Time Bugs in Open-Source Python Software". Authors List: Shrey Tiwari Carnegie Mellon University Pittsburgh, PA, USA shrey@cmu.edu Peter Vandervelde∗ University of California, Santa Barbara Santa Barbara, CA, USA pvandervelde@ucsb.edu Serena Chen∗ University of California, San Diego San Diego, CA, USA sec022@ucsd.edu Ao Li Carnegie Mellon University Pittsburgh, PA, USA aoli@cmu.edu Alexander Joukov∗ Stony Brook University Stony Brook, NY, USA ajoukov@cs.stonybrook.edu Rohan Padhye Carnegie Mellon University Pittsburgh, PA, USA rohanpadhye@cmu.edu

Happy Daylight Savings Time to everyone in the US! A few more weeks for European Summer Time.

If you notice some of your apps glitching, don't be alarmed. Even ChatGPT can't write correct date/time code!!!

See more in our upcoming paper: rohan.padhye.org/files/dateti... (MSR'25 preprint)

It's always been a "response" for me.

The only time it was a "rebuttal" was when I explicitly thanked Reviewers A, C, and D for their valuable feedback.