3 ms·
This contradicts what Google has reported about their own code, which is that most vulnerabilities are in new code
by Ar-Curunir 11mo ago
This contradicts what Google has reported about their own code, which is that most vulnerabilities are in new code
- pizlonator 11mo agoI don't see a contradiction between the statement that vulns in C++ code are generally on a downward trajectory, and the statement that most vulns are in new code.
- josefx 11mo agoI haven't looked at Googles style for c++ in a long time, but from what I remember it was actively hostile to best practices. Actively hostile to any improvement introduced by the language and actively hostile to the wider ecosystem of c++. Also Rob Pike was involved somehow at the time and that guy went around claiming that his C inspired GCed language would be the perfect replacement for C++ everywhere after the c++ standard simplified some common patterns for library authors because he was actively hostile towards reusable code. I am not sure I even want to know what the average Google C++ codebase looks like.