3 ms·
> The most common memory safety bug in released software is array overflow. Do you have a source for this? I thought it was use after free.
by EE84M3i 2y ago
> The most common memory safety bug in released software is array overflow.
Do you have a source for this? I thought it was use after free.
- tptacek 2y agoThat (or, more broadly, memory lifecycle bugs) would be my guess too.
- WalterBright 2y agoNot offhand, but every list of the common security bugs shows it's the top, by a wide margin.
- dcsommer 2y agoCWE Top 25: https://cwe.mitre.org/top25/archive/2024/2024_cwe_top25.html https://cwe.mitre.org/top25/archive/2024/2024_cwe_top25.html Out of bounds write and read are more prevalent then UAF. There are multiple types of bugs that can produce OOB read or write though.