Jelentősen javul biztonsági szempontból az Android kódminősége a memory-safe programnyelvek használata óta

Android 13 has ~1.5 million lines of Rust code, and zero memory safety vulnerabilities discovered in Android’s Rust code have been found so far. This compares to 1 vuln per <1,000 lines code that Android has had historically. https://t.co/Y54X2qS5iu

— Tim McNamara (@timClicks) February 8, 2023

For more than a decade, memory safety vulnerabilities have consistently represented more than 65% of vulnerabilities across products, and across the industry. On Android, we’re now seeing something different - a significant drop in memory safety vulnerabilities and an associated drop in the severity of our vulnerabilities.

Looking at vulnerabilities reported in the Android security bulletin, which includes critical/high severity vulnerabilities reported through our vulnerability rewards program (VRP) and vulnerabilities reported internally, we see that the number of memory safety vulnerabilities have dropped considerably over the past few years/releases. From 2019 to 2022 the annual number of memory safety vulnerabilities dropped from 223 down to 85.

[...]

Android 13 is the first Android release where a majority of new code added to the release is in a memory safe language.

[...]

Részletek a Google Security Blog Memory Safe Languages in Android 13 blogbejegyzésében.