4 ms·
> The Chromium project finds that around 70% of our serious security bugs are memory safety problems. > ~70% of the vulnerabilities Microsoft assigns a CVE eac
by mcpherrinm 4y ago
> The Chromium project finds that around 70% of our serious security bugs are memory safety problems.
> ~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues
Memory safety is a leading source of serious bugs in a big group of operating systems, browsers, image and file parsers, and more.
It does seem likely we can stop this, and it doesn’t seem likely to me we can fix it in C. We have tried and failed for years at that.
- pjmlp 4y agoSolaris SPARC is the first that has suceeded at it, and now others follow it, how? Hardware memory tagging, the language itself is beyond hope.