4 ms·

"I don't think I have ever run into a bash bug or issue." That is not a statement about a formally verifiable program that I would base a billion-dollar progra

• varjag 5y ago
  Ariane 5 bug was formally verified.
  • sigzero 5y ago
    No it really wasn't.
• count 5y ago
  Formally verified programs often still have bugs. AWS S2N, for example, currently has hundreds of open issues and identified bugs, despite being the subject of a continuous formal verification program. Bash powers probably hundreds of billions of dollars worth of critical infrastructure...
• pabs3 5y ago
  There are attempts at formal analysis of shell scripts, for eg: https://colis.irif.fr/ https://colis.irif.fr/ https://github.com/colis-anr/morbig https://github.com/colis-anr/morbig
• nexuist 5y ago
  My point being that whatever other software runs on this thing is far more likely to contain hidden bugs than bash has given its age and widespread distribution. It seems weird to single out bash as opposed to the hundreds of other random packages on any given distro.