10 ms·
Fixing isn't often a problem for CVEs. The hard part is almost always finding the CVE in the first place. There are some extreme cases that might require exte
by cogman10 7mo ago
Fixing isn't often a problem for CVEs. The hard part is almost always finding the CVE in the first place.
There are some extreme cases that might require extensive code changes, and those would benefit from LLMs. But a lot of the issues are things like off by one issues with pointers.
- wepple 7mo agoFixing is now the bottleneck. Most patches are non-trivial and then each project/maintainer has a preferred coding style, and they’re being inundated with PRs already, and don’t take kindly to slop. LLMs can find the CVE fully zero interaction, so it scales trivially.