Abstract:Software development life cycle is profoundly influenced by bugs: their introduction, identification, and eventual resolution account for a significant portion of software cost. This has motivated software engineering researchers and practitioners to propose different approaches for automating the identification and repair of software defects. Large language models have been adapted to the program repair task through few-shot demonstration learning and instruction prompting, treating this as an infilling task. However, these models have only focused on learning general bug-fixing patterns for uncategorized bugs mined from public repositories. In this paper, we propose InferFix: a transformer-based program repair framework paired with a state-of-the-art static analyzer to fix critical security and performance bugs. InferFix combines a Retriever -- transformer encoder model pretrained via contrastive learning objective, which aims at searching for semantically equivalent bugs and corresponding fixes; and a Generator -- a large language model (Codex Cushman) finetuned on supervised bug-fix data with prompts augmented via bug type annotations and semantically similar fixes retrieved from an external non-parametric memory. To train and evaluate our approach, we curated InferredBugs, a novel, metadata-rich dataset of bugs extracted by executing the Infer static analyzer on the change histories of thousands of Java and C# repositories. Our evaluation demonstrates that InferFix outperforms strong LLM baselines, with a top-1 accuracy of 65.6% for generating fixes in C# and 76.8% in Java. We discuss the deployment of InferFix alongside Infer at Microsoft which offers an end-to-end solution for detection, classification, and localization of bugs, as well as fixing and validation of candidate patches, integrated in the continuous integration pipeline to automate the software development workflow.

SequenceR: Sequence-to-Sequence Learning for End-to-End Program Repair

Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities

The Future Can’t Help Fix the Past: Assessing Program Repair in the Wild

Random Search and Code Similarity-Based Automatic Program Repair

InferFix: End-to-End Program Repair with LLMs

ThinkRepair: Self-Directed Automated Program Repair

Shaping Program Repair Space with Existing Patches and Similar Code

Leveraging Static Analysis for Bug Repair

Neural Program Repair with Program Dependence Analysis and Effective Filter Mechanism

Syntax Guided Neural Program Repair

Confix: Combining Node-Level Fix Templates and Masked Language Model for Automatic Program Repair

Path-Based Program Repair

Template-based Neural Program Repair.

A Software-Repair Robot based on Continual Learning

Enhancing Redundancy-based Automated Program Repair by Fine-grained Pattern Mining

Less Training, More Repairing Please: Revisiting Automated Program Repair via Zero-shot Learning

Graph-based, Self-Supervised Program Repair from Diagnostic Feedback

An Automatic Semantic Code Repair Service Based on Deep Learning for Programs with Single Error.

Semantic Code Repair using Neuro-Symbolic Transformation Networks

A Novel Approach for Automatic Program Repair using Round-Trip Translation with Large Language Models

Repairing Bugs in Python Assignments Using Large Language Models