Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.c > #141135
| From | "Rick C. Hodgin" <rick.c.hodgin@gmail.com> |
|---|---|
| Newsgroups | comp.lang.c, comp.lang.c++ |
| Subject | 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code |
| Date | 2019-02-18 10:15 -0500 |
| Organization | Liberty Software Foundation |
| Message-ID | <q4ei2f$r4l$1@dont-email.me> (permalink) |
Cross-posted to 2 groups.
https://www.fudzilla.com/news/pc-hardware/48123-more-than-70-percent-of-microsoft-patches-are-for-memory-problems
"More than 70 percent of Microsoft patches are for memory safety bugs.
"Speaking to the assembled throngs at an Israel Security conference,
a Microsoft engineer Matt Miller said that memory safety bugs happen
when software, accidentally or intentionally, accesses system memory
in a way that exceeds its allocated size and memory addresses.
"He said that over the the last 12 years, around 70 percent of all
Microsoft patches were fixes for memory safety bugs.
"The reason for this high percentage is because Windows has been writ-
ten mostly in C and C++, two 'memory-unsafe' programming languages...
"One slip-up in the developers' memory management code can lead to a
slew of memory safety errors that attackers can exploit with dangerous
and intrusive consequences --such as remote code execution or elevation
of privilege flaws..."
--
Rick C. Hodgin
Back to comp.lang.c | Previous | Next — Next in thread | Find similar | Unroll thread
7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "Rick C. Hodgin" <rick.c.hodgin@gmail.com> - 2019-02-18 10:15 -0500
Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2019-02-19 00:28 +0800
Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code Ben Bacarisse <ben.usenet@bsb.me.uk> - 2019-02-18 18:34 +0000
Re: 7 out of 10 Microsoft Windows patches address memory issues from C/C++ code "I Set My Girlfriend's Pantyhose on Fire" <cdalten@gmail.com> - 2019-02-21 13:35 -0800
csiph-web