A Declarative Framework for Hand-Crafted Mutation Analysis and Management

TL;DR

This paper introduces Marauder, a declarative framework that unifies various hand-crafted mutation representations, enabling more flexible and efficient mutation analysis for testing tools.

Contribution

It defines a mutation algebra and a conversion pipeline that support diverse mutation representations, improving mutation management and experimentation.

Findings

Unified mutation representations through a common intermediate form

Supports selective execution and higher-order mutant combinations

Prototype system Marauder demonstrates practical mutation management

Abstract

Hand-crafted mutants are increasingly used to evaluate fuzzing and property-based testing tools, but current tooling is fragmented and often forces trade-offs between readability, mutation preservation, and execution cost. We present a declarative framework for hand-crafted mutation analysis and management. First, we characterize five mutation representations: comment-based, preprocessor-based, patch-based, match-and-replace, and in-AST mutations. Second, we define a mutation algebra that supports selective execution, tag-based expansion, and higher-order combinations of mutants. Third, we describe a lossless conversion pipeline that maps mutation representations through a common intermediate form, including a strategy for extracting and normalizing in-AST mutations. We implement these ideas in Marauder, a prototype system for injecting, activating, resetting, and composing hand-crafted mutants across representations. This framework clarifies the design space of hand-crafted mutation systems and provides a practical foundation for more efficient and expressive mutation experiments.