A survey of BSD kernel vulnerabilities [pdf]

This was a great preso.<p>I think we need to fund regular audits of FreeBSD that use this type mindset.

Impressive that FBSD only had 20% more bugs over OBSD despite having 200% more lines of code.

Ilja is one of the baddest dudes out there. Excellent work once again, chapeau!

OpenBSD stopped claiming &quot;N years without a localhost hole in the default install!&quot; in 2000. See <a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20000815063126&#x2F;http:&#x2F;&#x2F;openbsd.org:80&#x2F;" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20000815063126&#x2F;http:&#x2F;&#x2F;openbsd.or...</a> and <a href="https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20001110110500&#x2F;http:&#x2F;&#x2F;www.openbsd.org:80&#x2F;" rel="nofollow">https:&#x2F;&#x2F;web.archive.org&#x2F;web&#x2F;20001110110500&#x2F;http:&#x2F;&#x2F;www.openbs...</a><p>But Page 6 of this pdf has OpenBSD developers going on about Linux and its 20 localhost kernel security holes in 2005. Seems a bit dishonest.

Are there any CVEs for these? Have they been fixed?

Seems interesting. Is there a recorded talk to go with this?

<p><pre><code> expired pointers, Double frees, Underflows, overflows, signedness, NULL deref, Division by zero, Memory leaks </code></pre> YIKES!

Blasphemy!

Have the BSD devs seen this? Have the required bugs been filed?

What is the likelihood that we will see a major operating system written in a safe language such as Rust in the next 10 years?