SQLancer: Finding Logic Bugs in Database Management Systems

on YouTube ↗06m

" summary

An automated SQL fuzzer called SQLancer generates large numbers of random SQL workloads using grammar-aware mutations and runs them against real DBMS binaries to find logic bugs. It applies automated differential testing by comparing engine behavior across versions and systems to detect incorrect query results and crashes, and it produces concrete failing inputs with the exact queries and result mismatches for reproduction and fixing.

AI-written summary · about

" related talks

• 36mSQLancer: Automatically Finding Bugs in Database Management SystemsManuel Rigger · SPLASH 2020 REBASE
• 10mHow to test software without writing testsManuel Rigger · It Will Never Work in Theory (Online, April 2022)
• 15mFinding Bugs in Database Systems via Query PartitioningManuel Rigger, Zhendong Su · OOPSLA 2020
• 15mDDLumos: Understanding and Detecting Atomic DDL Bugs in DBMSsYu Jiang, Jie Liang, Zhiyong Wu, Jingzhou Fu, Wenqian Deng · USENIX ATC '25
• 18mValScope: Value-Semantics-Aware Metamorphic Testing for Detecting Logical Bugs in DBMSsLi Lin, Liehang Chen, Rongxin Wu · 20th USENIX Symposium on Operating Systems Design and Implementation (OSDI '26)
• 14mDetecting Logic Bugs in Database Engines via Equivalent Expression TransformationZhendong Su, Zu-Ming Jiang · 18th USENIX Symposium on Operating Systems Design and Implementation (OSDI '24)
• 18mApparently, you can "debug" your SQL queriesEyal Trabelsi · Conf42 Observability 2023
• 45mForget SQL! Create your own AI Data AnalystArtur Badretdinov · DevFestYYC 2024