一句话：提出 SPatch，利用细粒度补丁分析与差分符号执行识别 safe patch，辅助下游补丁传播。
供应链安全的关键挑战之一是在上游软件中识别可安全传播的补丁；然而现有安全补丁分析召回率较低，容易漏掉许多安全补丁。本文提出 SPatch，面向下游开发者的补丁传播需求，检测细粒度的 safe patch。SPatch 结合细粒度补丁分析与一种新的差分符号执行技术，分析代码变更对程序功能的影响，从而判断补丁是否可以安全传播。摘要未报告具体实验数据，但作者将低召回率作为主要动机，并期望该方案提升安全补丁识别效果并辅助下游补丁传播。
Enhancing supply chain security is crucial, often involving the detection of patches in upstream software. However, current security patch analysis works yield relatively low recall rates (i.e., many security patches are missed). In this work, we offer a new solution to detect safe patches and assist downstream developers in patch propagation. Specifically, we develop SPatch to detect fine-grained safe patches. SPatch leverages fine-grained patch analysis and a new differential symbolic execution technique to analyze the functional impacts of code changes.