Rate of bugs and rate of security holes are mostly uncorrelated

Rate of bugs and rate of security holes are mostly uncorrelated

Posted Mar 8, 2006 0:54 UTC (Wed) by nix (subscriber, #2304)
In reply to: Rate of bugs and rate of security holes are mostly uncorrelated by Junior_Samples
Parent article: Coverity releases first defect survey results

Code which is complex is only defective if it's doing a simple job despite that complexity.

Things like GCC, say, are doing very complex jobs: now perhaps GCC is more complex than it needs to be if all were ideal, but there's no way you'll ever get it simple enough to make static analysis easy. It does a very complex job.

(And so do the knottier parts of the kernel.)

---

(Log in to post comments)