Proofs in software are more complicated than that. For something like flash, you could have proofs that it handles corrupt, either intentionally or unintentiona

Proofs in software are more complicated than that. For something like flash, you could have proofs that it handles corrupt, either intentionally or unintentionally, data without blowing up. Then again, I'm one to believe that we need to focus more on capabilities systems, and other ways to ensure applications can only do what they want to do. Look at something like the rowhammer attack. Being able to break out of a sandbox through completely valid code is something we should be looking at mitigating as well.