A Large-Scale Empirical Study of Security Patches
An empirical study on real bug fixes