Miracle-dz/UniFAR-FTUs huggingface dataset:
Detecting Kernel Refcount Bugs with Two-Dimensional Consistency Checking

In the Linux kernel, reference counting (refcount) has become a default mechanism that manages resource objects. A refcount of a tracked object is incremented when a new reference is assigned and decremented when a reference becomes invalid. Since the kernel manages a large number of shared resources, refcount is prevalent. Due to the inherent complexity of the kernel and resource sharing, developers often fail to properly update refcounts, leading to refcount bugs. Researchers have shown that refcount bugs can cause critical security impacts like privilege escalation; however, the detection of refcount bugs remains an open problem. In this paper, we propose CID , a new mechanism that employs two-dimensional consistency checking to automatically detect refcount bugs. By checking if callers consistently use a refcount function, CID detects deviating cases as potential bugs; by checking how a caller uses a refcount function, CID infers the condition-aware rules for the function to correspondingly operate the refcount, and thus a violating case is a potential bug. More importantly, CID ’s consistency checking does not require complicated semantic understanding, inter-procedural data-ﬂow tracing, or refcount-operation reasoning. CID also features an automated mechanism that systematically identiﬁes refcount ﬁelds and functions in the whole kernel. We implement CID and apply it to the Linux kernel. The tool found 44 new refcount bugs that may cause severe security issues, most of which have been conﬁrmed by the maintainers.
Secretary Matching Meets Probing with Commitment

We consider the online bipartite matching problem within the context of stochastic probing with commitment. This is the one-sided online bipartite matching problem where edges adjacent to an online node must be probed to determine if they exist based on edge probabilities that become known when an online vertex arrives. If a probed edge exists, it must be used in the matching. We consider the competitiveness of online algorithms in the adversarial order model (AOM) and the secretary/random order model (ROM). More specifically, we consider an unknown bipartite stochastic graph G = ( U, V, E ) where U is the known set of offline vertices, V is the set of online vertices, G has edge probabilities ( p e ) e ∈ E , and G has edge weights ( w e ) e ∈ E or vertex weights ( w u ) u ∈ U . Additionally, G has a downward-closed set of probing constraints ( C v ) v ∈ V , where C v indicates which sequences of edges adjacent to an online vertex v can be probed. This model generalizes the various settings of the classical bipartite matching problem (i.e. with and without probing). Our contributions include the introduction and analysis of probing within the random order model, and our generalization of probing constraints which includes budget (i.e. knapsack) constraints. Our algorithms run in polynomial time assuming access to a membership oracle for each C v . In the vertex weighted setting, for adversarial order arrivals, we generalize the known 12 competitive ratio to our setting of C v constraints. For random order arrivals, we show that the same algorithm attains an asymptotic competitive ratio of 1 − 1 /e , provided the edge probabilities vanish to 0 sufficiently fast. We also obtain a strict competitive ratio for non-vanishing edge probabilities when the probing constraints are sufficiently simple. For example, if each C v corresponds to a patience constraint ℓ v (i.e., ℓ v is the maximum number of probes of edges adjacent to v ), and any one of following three conditions is satisfied (each studied in previous papers), then there is a conceptually simple greedy algorithm whose competitive ratio is 1 − 1 e . When the offline vertices are unweighted. When the online vertex probabilities are “vertex uniform”; i
Birt-Hogg-Dubé Syndrome and Hereditary Leiomyomatosis and Renal Cell Carcinoma Syndrome: An Effective Multidisciplinary Approach to Hereditary Renal Cancer Predisposing Syndromes

Aim We aimed to describe and analyse clinical features, characteristics, and adherence to surveillance guidelines in an Australian Birt-Hogg-Dubé syndrome (BHD) and hereditary leiomyomatosis and renal cell cancer (HLRCC) cohort. Methods All identified patients with a diagnosis of BHD or HLRCC at RBWH 01/01/2014-01/09/2019 were included (HREC/17/QRBW/276). All patients were initially assessed and counselled by a clinical geneticist and then referred to an adult nephrologist. Baseline and incidental clinical variables were extracted and analysed. Results Fifty-seven patients were identified (28 BHD, 29 HLRCC) with a median age of 47 years. The median and cumulative follow-up were 1 and 99 years, respectively. Baseline renal MRI occurred in 40/57 patients, and 33/57 had regular MRI as per the national guidelines (eviQ). Of 18/57 without baseline imaging, nine were yet to have imaging, seven were lost follow-up, and two patients had logistic difficulties. RCC was diagnosed in 11/57 patients: two of 28 with BHD were diagnosed with RCC aged 73 and 77, both prior to commencement of surveillance. Nine of 29 patients with HLRCC were diagnosed with RCC (one of 29 during surveillance at 47 years of age) and eight of 29 prior to commencement of surveillance (11–55 years). Amongst BHD patients, cutaneous fibrofolliculomas were noted in 15 patients, lung cysts were detected in seven patients, spontaneous pneumothoraces in five patients, and parotid oncocytoma in two of 28. Amongst those with HLRCC, cutaneous leiomyomas were noted in 19/29, cutaneous leiomyosarcoma diagnosed in one of 29, and uterine fibroids in 13 female patients. Conclusion Evidence-based RCC screening in BHD and HLRCC cohort is feasible and able to identify incidental renal lesions. Multidisciplinary patient management enables expedited genetic counselling, diagnosis, longitudinal screening, and RCC management. The success of this clinical model warrants consideration of undertaking longitudinal screening of BHD and HLRCC patients by nephrologists.
Primordial Germ Cell Specification in Vertebrate Embryos: Phylogenetic Distribution and Conserved Molecular Features of Preformation and Induction

The differentiation of primordial germ cells (PGCs) occurs during early embryonic development and is critical for the survival and fitness of sexually reproducing species. Here, we review the two main mechanisms of PGC specification, induction, and preformation, in the context of four model vertebrate species: mouse, axolotl, Xenopus frogs, and zebrafish. We additionally discuss some notable molecular characteristics shared across PGC specification pathways, including the shared expression of products from three conserved germline gene families, DAZ (Deleted in Azoospermia) genes, nanos-related genes, and DEAD-box RNA helicases. Then, we summarize the current state of knowledge of the distribution of germ cell determination systems across kingdom Animalia, with particular attention to vertebrate species, but include several categories of invertebrates – ranging from the “proto-vertebrate” cephalochordates to arthropods, cnidarians, and ctenophores. We also briefly highlight ongoing investigations and potential lines of inquiry that aim to understand the evolutionary relationships between these modes of specification.
Capture: Centralized Library Management for Heterogeneous IoT Devices

With their growing popularity, Internet-of-Things (IoT) devices have become attractive targets for attack. Like most modern software systems, IoT device ﬁrmware depends on external third-party libraries extensively, increasing the attack surface of IoT devices. Furthermore, we ﬁnd that the risk is compounded by inconsistent library management practices and delays in applying security updates—sometimes hundreds of days behind the public availability of critical patches—by device vendors. Worse yet, because these dependencies are “baked into” the vendor-controlled ﬁrmware, even security-conscious users are unable to take matters into their own hands when it comes to good security hygiene. We present Capture , a novel architecture for deploying IoT device ﬁrmware that addresses this problem by allowing devices on a local network to leverage a centralized hub with third-party libraries that are managed and kept up-to-date by a single trusted entity. An IoT device supporting Capture comprises of two components: Capture-enabled ﬁrmware on the device and a remote driver that uses third-party libraries on the Capture hub in the local network. To ensure isolation, we introduce a novel Virtual Device Entity (VDE) interface that facilitates access control between mutually-distrustful devices that reside on the same hub. Our evaluation on a prototype implementation of Capture, along with 9 devices and 3 automation applets ported to our framework, shows that our approach incurs low overhead in most cases ( < 15% increased latency, < 10% additional resources). We show that a single Capture Hub with modest hardware can support hundreds of devices, keeping their shared libraries up-to-date.
FlowDist: Multi-Staged Refinement-Based Dynamic Information Flow Analysis for Distributed Software Systems

Dynamic information ﬂow analysis (DIFA) supports various security applications such as malware analysis and vulnerability discovery. Yet traditional DIFA approaches have limited utility for distributed software due to applicability , portability , and scalability barriers. We present F LOW D IST , a DIFA for common distributed software that overcomes these challenges. F LOW D IST works at purely application level to avoid platform customizations hence achieve high portability . It infers implicit, interprocess dependencies from global partially ordered execution events to address applicability to distributed software. Most of all, it introduces a multi-staged reﬁnement-based scheme for application-level DIFA, where an otherwise expensive data ﬂow analysis is reduced by method-level results from a cheap pre-analysis, to achieve high scalability while remaining effective. Our evaluation of F LOW D IST on 12 real-world distributed systems against two peer tools revealed its superior effectiveness with practical efﬁciency and scalability. It has found 18 known and 24 new vulnerabilities, with 17 conﬁrmed and 2 ﬁxed. We also present and evaluate two alternative designs of F LOW D IST for both design justiﬁcation and diverse subject accommodations.
Influencing Factors of Athletes' Injury Rehabilitation from the Perspective of Internal Environment

Athlete’s injury recovery is related to the athlete’s personal value. A scientific and effective rehabilitation program will help athletes overcome their illnesses and return to the game as soon as possible. Based on the literature review and the internal environment perspective, this paper constructs a model of factors affecting athletes’ injury rehabilitation. Through the empirical analysis of 129 questionnaires, we have verified the research hypothesis of each factor. The research results show that psychological adjustment, rehabilitation learning, and video reflection have a significant positive impact on athletes’ injury rehabilitation, while imagery has no significant impact. This research provides a reference plan for athletes to adopt effective injury rehabilitation training methods. At the same time, we have also enriched the research literature on athletes’ injury rehabilitation solutions.
T-RBAC Model Based on Two-Dimensional Dynamic Trust Evaluation under Medical Big Data

The professionalism and complexity of medical big data and the expensiveness of acquiring medical knowledge make it difficult for policymakers to judge whether the information accessed by doctors is necessary from a professional perspective and to formulate accurate access control strategies. To solve the above problems, this paper proposes a T-RBAC (trust-role based access control) model based on two-dimensional dynamic trust assessment, Using AHP and Grey theory to quantify the role attribute trust in the dimension of the doctor’s own attributes, Using Euler’s measurement method and probability statistics to quantify doctors’ behavioral trust in the dimension of historical behavior, then, the trust rule base performs hierarchical authorization based on the comprehensive trust value obtained by the weighted average. Multiattribute trust comprehensive evaluation makes the access control model have finer access granularity and higher security. At the same time, the introduction of time decay function and penalty function enhances the model’s sensitivity, dynamics, and resistance to bleaching attacks.
DEFInit: An Analysis of Exposed Android Init Routines

During the booting process of an Android device, a special daemon called Init is launched by the kernel as the ﬁrst user-space process. Android allows vendors to extend the behavior of Init by introducing custom routines in . rc ﬁles. These Init routines can also be triggered by privileged pre-installed apps in a certain manner to accomplish privileged functionalities. However, as these pre-installed apps may fail to properly protect access to code sites triggering these Init routines, the capabilities of these routines may leak to unprivileged apps, resulting in crossing security boundaries set by the system. To this end, this study aims at investigating the prevalence of these Init routines and their security impact. We present DEFI NIT as a tool to help automate the process of identifying Init routines exposed by pre-installed apps and estimating their potential security impact. Our ﬁndings are alarming. We found that custom Init routines added by vendors were substantial and had signiﬁcant security impact. On a data set of 259 ﬁrmware from the top 21 vendors worldwide, we iden-tiﬁed 1 , 947 exposed custom Init routines in 101 ﬁrmware from 13 vendors. Of these routines, 515 performed at least one sensitive action. We veriﬁed 89 instances spanning 30 ﬁrmware from 6 vendors, allowing unprivileged apps to perform sensitive functionalities without user interaction, including disabling SELinux enforcement, snifﬁng network trafﬁc, reading system logs, among others.
A novel recovery strategy based on link prediction and hyperbolic geometry of complex networks

Recovery of complex networks is an important issue that has been extensively used in various ﬁelds. Much work has been done to measure and improve the stability of complex networks during attacks. Recently, many studies have focused on the network recovery strategies after attack. In many real cases, link retrieval and recovery of critical infrastructures such as transmission network and telecommunications infrastructures are of particular importance and should be prioritized. For example, when a ﬂood disrupts opticalﬁbrecommunicationsintransmissionnetworksandparalyzesthenetwork,linkretrievalcorresponds totherecoveryofﬁbrecommunications,sothatthetransmissionnetworkcommunicationcapacitycan berestoredattheearliestpossibletime.So,predictingtheappropriatereservedlinksinawaythatthe networkcanberecoveredatthelowestcostandfastesttimeafterattacksorinterruptionswillbecritical inadisaster.Inthisarticle,differentkindsofattackstrategiesareprovidedandsomeretrievalstrategies basedonlinkpredictionmethodsareproposedtorecoverthenetworkafterfailureandattack.Besidethat, anewlinkpredictionmethodbasedonthehyperbolicgeometryofthecomplexnetworkisproposedto discoverredundantlinks.Thenumericalsimulationsrevealitssuperioritythanothercommonandrecent link prediction-based methods used for network recovery, especially in the case of attacks based on edge betweenness strategy.
Surgical treatment outcome on a national cohort of 176 patients with cervical manifestation of rheumatoid arthritis

Purpose: Rheumatoid arthritis (RA) affecting the cervical spine results in instability and deformity that can be divided into the subtypes C1–C2 horizontal (atlantoaxial instability), C0–C2 vertical (basilar invagination), subaxial, and combined instabilities. The aim of this study was to compare the surgical treatments and outcomes of RA-related deformity and instability in a population-based setting. Patients and Methods: All patients with RA in the national Swespine register from January 1, 2006, to March 20, 2019, were assessed. Baseline characteristics, surgical treatments, European Myelopathy Scale (EMS), Neck Disability Index, the Visual Analog Scale for neck and arm pain as well as pre- and postoperative imaging were analyzed. The follow-up time points were at 1-, 2-, and 5 years after surgery. Results: A total of 176 patients were included. There were 62 (35%) patients with C1–C2 horizontal instability, 48 (27%) with C0–C2 vertical instability, 19 (11%) patients with subaxial instability, 43 (24%) patients with combined instability, and 4 patients without instability served as controls. The EMS improved in the C1–C2 horizontal instability group after fusion surgery (Δ =2.6 p) but remained within baseline confidence intervals in the other groups. All patients regardless of instability improved in pain. The subaxial instability had the highest risk of death within 5 years after surgery (11/19, 58%). The most dangerous complications due to implant failure were seen in patients instrumented with laminar hooks. Conclusion: The neurological outcome after fusion surgery is poor and the death rate is high in patients with cervical RA-related instability and deformity.
Electron microscopic comparison of the donor cut edges using femtosecond laser-assisted keratoplasty versus conventional keratoplasty

PURPOSE: To describe and compare the histological changes in the cut edges of the remaining donor corneal rim using femtosecond laser-assisted keratoplasty (FAK) versus conventional penetrating keratoplasty (PK) via light and transmission electron microscopic examination. METHODS: This was a prospective observational study of 10 eyes; 5 FAK (top-hat technique) and 5 conventional PK. Main outcomes were histological findings at the cut edge of the donor corneal rim (at 3, 6, 9, and 12 o'clock). RESULTS: Cellular and ultra-cellular changes in the form of stromal edema, disorganized collagen fibers, and nuclear changes were more prominent in the FAK eyes as compared to the conventional PK ones. CONCLUSION: FAK induces more collateral damage in the cut edge of corneal donor graft at cellular and ultra-cellular levels, compared to conventional trephination. Further studies are required to investigate the clinical ramifications of this observation.
Digital Health Services among Patients with Diabetes during the COVID-19 Pandemic: A Scoping Review

Background and Aims: COVID-19 pandemic causes massive disruption of the global health system. The diabetic patients are the vulnerable parts population who are predicted to have a significant issue during the pandemic regarding the conventional type of consultation by face-to-face which may result in the higher risk of COVID-19 exposure. This study aims to observe the use of digital health services for diabetes management during COVID-19 pandemic. Methods: A scoping review was conducted in PubMed, ScienceDirect, and Google Scholar during August until September 2020. The keywords that are used on the searching process are diabetes AND digital service OR telemedicine OR technology AND COVID-19. The criteria included the selection of scientific publication as an original research and reviews. Results: All published articles were gathered from 3 search engines; PubMed, Science Direct, and Google Scholar. The discussion explicates the practical considerations that are in accordance with the current condition of each country. In order to do so, the evidence is classified based on the level of global digital health framework in the developed and developing countries. It was found that the minimal level of digital health that connects diabetes patients with healthcare providers was at level 2, which is by using the video mode. The most advanced is at level 3B, which is applied by using the CGM devices, which provide active monitoring, diagnosis, and treatment based on timely clinical judgment. Conclusion: It is feasible to utilize the digital health service during the COVID-19. This review is projected to be beneficial for the patient and health care providers to select the most feasible approach of digital health that merits the contextual resource.
Comparison of Nutritional Status of Under-Five Indian Children (NFHS 4 Data) Using WHO 2006 Charts and 2019 Indian Synthetic Charts

Introduction: There is a growing body of evidence against using World Health Organization (WHO) charts for developing nations. Our objectives were: 1) To compare nutritional status of <5-year-old Indian children using WHO charts and synthetic Indian charts (SC) 2019. 2) To study nutritional status across wealth index categories. 3) To study nutritional status of predominantly breast-fed infants <6 months of age using both charts. Materials and Methods: Data from 4th National Family Health Survey (n ~ 236117, 0--59-month-old children) were used for assessing nutritional status using the WHO charts and SC. Z-scores were calculated for length/height, weight, and weight-for-height (WAZ) using both charts. Children were classified into degrees of malnutrition using appropriate cutoffs. Results: Stunting, wasting, and underweight were significantly higher using WHO charts. The prevalence of stunting (height for age) and wasting (WHZ) changed from high to medium and critical to poor when the reference changed from WHO to SC. All Z-scores showed an improving trend with increasing wealth index. On SC, almost all WHZ (wasting) from the richest to poorer were >-0.5 (clinically significant), whereas on WHO charts all wealth classes had WHZ <-0.5. For children under the age of 6 months, WHZ from richest to poorest was between -0.97 and -0.89 by WHO and 0.27 and 0.38 by SC. Conclusions: Use of Indian synthetic growth charts for growth monitoring of under-five children may be more appropriate; infants under 6 months and children from well off families performed well on these charts.