3 ms·
https://insights.dice.com/2019/11/27/programming-language-vulnerabilities/ https://insights.dice.com/2019/11/27/programming-language-vu... I think this has rea
by lmilcin 5y ago
https://insights.dice.com/2019/11/27/programming-language-vulnerabilities/ https://insights.dice.com/2019/11/27/programming-language-vu...
I think this has reasonable explanation:
“The high number of open source vulnerabilities in C can be explained by several factors,” the organization added in a blog posting. “For starters, C has been in use for longer than any of the other languages we researched and has the highest volume of written code. It is also one of the languages behind major infrastructure like Open SSL and the Linux kernel. This winning combination of volume and centrality explains the high number of known open source vulnerabilities in C.”
So... C++ is there. That it isn't the top of the list is a reflection on the fact that it is rarely used for important stuff.
Nobody registers CVEs for computer games, yet they are predominantly written in C++ and full to the brim with security holes. If what you said was true, these should fare better than C code, and yet they do not.
- whatshisface 5y agoThat's kind of a useless chart for the reason you point out, which is that it doesn't divide by language use. I think computer games are a bad example because game developers don't care about code quality for their release-once-and-done games.