C related bugs as a share of bugs
2026-09-09 18:53:41.716354+02 by Dan Lyke 0 comments
I've been thinking a lot about Rust and C and C++, and where errors come from, and whether it's really a good idea to replace pointers with arenas and indexes which doesn't really do a lot to reduce the cognitive load on the coder.
daniel:// stenberg:// @bagder@mastodon.social
Updated chart showing the share of #curl vulnerabilities caused by "C mistakes" as a share of all the vulns we know existed in code over time.
Interesting is the large drop in C vulnerabilities between 2017 and 2020, attributed to "Just better tooling and proper engineering."
Some of this is what's happening with a mature code base, but I think there's something there...