Memory errors like out-of-bounds reads and use-after-free bugs in C and C++ have long caused severe vulnerabilities, including infamous exploits such as WannaCry and Heartbleed.
Anne Thomas from Gartner noted that roughly 70% of software security issues are tied to incorrect memory handling, highlighting the urgency in adopting memory-safe languages.
Despite the ONCD's recommendations, the transition from C to memory-safe languages faces major hurdles, with C's system-level utility making it a persistent choice for developers.
The new translation technique by Microsoft and Inria offers hope by allowing a subset of C code to be automatically converted to memory-safe Rust, addressing vital memory safety concerns.
Collection
[
|
...
]