A 'real' C programmer probably is fine .... but that's like 1% of the population of developers outputting C programs.

And now you have AI that's learned from the other 99% so nothing's changing anytime soon.

The problem is most drivers believe they are above average drivers.

And almost all of them could be correct.

At least 49.999 percent of them anyway

Are you sure?

You are confusing mean and median

Lake Wobegon, where all the children are above average :-)

I would hope writing C code for the Linux kernel qualifies you as a real C programmer. And yet, here we are. Being good, careful, and extensively reviewed by others helps, but is clearly not enough.

> A 'real' C programmer probably is fine .... but that's like 1% of the population of developers outputting C programs.

The idea that there's a small subset of C programmers who can wrangle the language into obeying them perfectly is obviously, a fantasy.

Rust eliminates some bug classes, but we don't even know yet how many of these vulns would've been prevented by using Rust.

It's also possible that we'd need even more architectural changes to avoid such bugs.

The idea of a microkernel suddenly becomes more appealing...

We have a pretty good idea of this actually, people have been classifying bugs into memory safety issues, etc for a while even pre-AI.

It's worth checking in on the vulns for uutils- lots of stuff! Interacting with the world outside of the compiler has lots of details. No use after frees afaik though.

Yes but even if you swipe the Rust magic wand and somehow reduce the vulnerabilities by 99%, you are still left with 20 critical vulnerabilities per year.

There is something about kernels that make them easy targets and it's not just the language.