Question on the root cause of the testcases in the paper

[xwh16]

Hi, thanks for sharing your excellent code on Aurora.

Could you please add a list giving the ground truth (i.e. root cause) of the vulnerabilities you tested? The root cause of some testcases in the paper are complicated to determine, so I would like to know how you determine which instruction (among the top-50) is the actual root cause. For example, the use-after-free vulnerability in NASM(Table 1, #23) seems to have multiple root causes (its patch has patched multiple locations), which one do you consider as its root cause?

Looking forward to hearing back from you at your earliest convenience. Regards