4 ms·
Do you know that memory safety is relevant for security, compared to other causes of exploits? Or are you just guessing?
by lkdfjlkdfjlg 2y ago
Do you know that memory safety is relevant for security, compared to other causes of exploits? Or are you just guessing?
- mkopinsky 2y agoThe developer of curl has done an analysis of what percent of his CVEs would have been avoided in a memory safe language. I think the answer was a bare majority.
- lolinder 2y agoAs a very relevant example, Chrome found that 70% of their serious security bugs were memory safety bugs. 36% of them were use-after-free. https://www.zdnet.com/article/chrome-70-of-all-security-bugs-are-memory-safety-issues/ https://www.zdnet.com/article/chrome-70-of-all-security-bugs...
- ethanol 2y agoIt's been discussed at length multiple times. This should be enough to get you started on further research: https://msrc.microsoft.com/blog/2019/07/a-proactive-approach-to-more-secure-code/ https://msrc.microsoft.com/blog/2019/07/a-proactive-approach... > ~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues