Chrome security track proves that safe C++ programs are impossible
Chrome Year 2024 security so far
- 88 chrome CVE security incidents reported
- 30 times use after free
- 11 times out of bounds memory access
- 6 times heap buffer overflow
- 1 times integer underflow
- 6 times type confusion (wrong casting)
- 4 times object corruption (accessing field using wrong reference type)
- no null pointer dereferences yet this year
57 of out 88 (65%) can be fully prevented in rust