Re:Mozilla's Servo Engine Now Capable of Rendering GitHub
by MichaelGG on Wednesday August 19, 2015 @12:47PM
(#10086754)
What percentage of critical vulnerabilities in Firefox were due to memory safety issues? Is it changing dramatically?
[ Parent
| on HN ]
Re:Mozilla's Servo Engine Now Capable of Rendering GitHub
by pcwalton on Wednesday August 19, 2015 @12:50PM
(#10086781)
> What percentage of critical vulnerabilities in Firefox were due to memory safety issues?
The vast majority of them.
(I haven't done the exact analysis, but I have performed similar ones and the fact that memory safety issues dominated was clear. Note also that I am not claiming that solving memory safety issues is a panacea. "Merely" that we're defending against the vast majority of critical security vulnerabilities.)