The study found: Firefox keep a large number of potential defects and loopholes

Post Date:2008-12-21 views:
In recent days, security researchers through the use of automatic analysis software, the industry's popular Firefox code for the analysis of results showed that, despite the preparation of Firefox is more convenient, but there are a large number of potential security vulnerabilities and lack of restrictions.

Mozilla developers, a criticism of this analysis, saying it will not help solve the security hole. Klocwork organization K7 through the use of AdamHarrsion analysis software, multiple versions of Firefox had a safety test, including the latest version 1.5.0.6 and found about 611 missing and 71 limit vulnerabilities.

When the memory was allocated or re-analysis, this will lead to a lot of loopholes in the code to detect invalid. Memory management vulnerabilities arising from the second to reach the 141 loophole. Implementation of the code can not detect the path often give rise to potential problems.

At present, Firefox developers have received the results of safety tests. Harrsion said: "Only a profound professional knowledge and understanding of the background of the Firefox some people can really understand the vulnerability of these hazards."

As the opera or Microsoft did not provide copyright code, the same browser comparison tests, not on Firefox comparative analysis.

A former Mozilla project developers AlecFleet said that the use of code analysis software is good, but the company Klocwork's conclusions are misleading and not entirely the possibility. Harrsion However, the defense said, although analysis is carried out automatically, but the software than the traditional analysis of the software is more complex.

 

Latest Comments
    Loading...
Download Firefox V2.0.0.14 for Windows