Just how buggy is Firefox? - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 09-08-2006, 08:19 AM   #1 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default Just how buggy is Firefox?

Security researchers that carried out a code analysis of popular open source browser Firefox using automated tools, have discovered scores of potential defects and security vulnerabilities despite coming to the conclusion that the software was generally well written.

A former Mozilla developer has criticised the methodology of the analysis and said it provides little help in unearthing real security bugs.

Enterprise Messaging Management from Symantec
Several versions of the software were put through their paces by Adam Harrsion of Klocwork using Klocwork's K7 analysis tool. The analysis, which culminated in an examination of Firefox version 1.5.0.6 unearthed 611 defects and 71 potential security bugs.

A large number of these flaws resulted from the code not checking for null after memory was allocated or reallocated. Memory management issues accounted for the next highest defect count (141 flaws). Failure to check the execution path of code also frequently cropped up as a potential error.

Firefox developers have been sent the analysis results, which Harrsion concedes is preliminary. "Only someone with in-depth knowledge and background of the Firefox code could judge the danger of a particular security vulnerability," he writes.

It's unclear how many, if any, of the potential defects identified by Klocwork's tool are exploitable, the most important consideration.

Neither Microsoft nor Opera have released proprietary code for their respective browsers for similar analysis, so no comparisons can be drawn.

Alec Fleet, a former developer on the Mozilla Project, said that running code analysis tools has some benefit, but he criticised Klocwork's conclusions as incomplete and potentially misleading.

"To claim that there are 611 known, specific, real defects is just wrong. With most of these tools the signal to noise ratio is very high," he writes.

"This is not to say there aren't 141 other legitimate memory management defects lurking, but it takes a deeper (human) understanding of the codebase, as well as testing of actual codepaths in use, to flush them out. To spend smart developers' time going over long reports of machine-generated lint would be a waste," Fleet adds.

Harrsion defended the quality of his analysis against these criticisms. "Although this analysis was automated, the level of analysis is more sophisticated then a traditional lint-type tool. In this particular analysis we reviewed the entire results to verify the correctness of the defects... [but] as with any analysis only the developers can be the final judge on the severity of these problems," he said.

http://www.theregister.com/2006/09/0..._bug_analysis/
__________________

__________________
Osiris is offline  
Old 09-08-2006, 10:19 AM   #2 (permalink)
Ultra Techie
 
Join Date: Feb 2006
Posts: 829
Send a message via ICQ to Jam3s-Zer0 Send a message via AIM to Jam3s-Zer0 Send a message via Yahoo to Jam3s-Zer0
Default

611 Defects, 71 Vulnerabilities Found In Firefox

http://it.slashdot.org/article.pl?si...23244&from=rss

http://www.g2zero.com/2006/09/examin...the_firef.html
__________________

Jam3s-Zer0 is offline  
Old 09-08-2006, 10:45 AM   #3 (permalink)
Monster Techie
 
Join Date: Jun 2005
Posts: 1,706
Default

although I love firefox, I recently started useing IE6, and have yet to switch back...

edit: ie7
Juice Daddy is offline  
Old 09-08-2006, 11:12 AM   #4 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Default

What made you go back to IE 6?
__________________
Osiris is offline  
Old 09-08-2006, 11:18 AM   #5 (permalink)
Monster Techie
 
Join Date: Jun 2005
Posts: 1,706
Default

ops, I meant to say IE7

I am useing vista now, and I haven't seen any reason to reinstall firefox
Juice Daddy is offline  
Old 09-08-2006, 11:25 AM   #6 (permalink)
Techie Beyond Description
 
Osiris's Avatar
 
Join Date: Jan 2005
Location: Kentucky
Posts: 36,817
Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris
Thumbs up

IC, sounds good.
__________________
Osiris is offline  
Old 09-08-2006, 03:29 PM   #7 (permalink)
Newb Techie
 
Join Date: Mar 2006
Posts: 33
Default

i'm still using netscape 7.2 and i love it.
version 8 annoys the **** outta me.
chris32680 is offline  
Old 09-08-2006, 04:59 PM   #8 (permalink)
Ultra Techie
 
Disillusion's Avatar
 
Join Date: Nov 2005
Posts: 810
Default

Interesting. I dunno though. My spyware cleaners pick up much less tracking cookies and stuff since I started using Firefox.

Only thing I HATE about Firefox is that after a half hour or so of useage it's hogging up like 120mb of RAM! I wish I could fix that!

I will never browse the internet again without Adblock though....
__________________
CPU: Intel i7 2600k @ 4.4 GHz
Cooler: Cooler Master V8
Mobo: ASRock Z68 Extreme3 Gen3
RAM: Corsair Vengeance 16 GB DDR3 1600 MHz
GPU: EVGA 560 Ti
HDD: Cruicial M4 SSD 128 GB
HDD 2: WD VelociRaptor 300 GB
PSU: Corsair TX650w
Case: Corsair 600T Graphite Series
Disillusion is offline  
Old 09-08-2006, 06:12 PM   #9 (permalink)
Monster Techie
 
Join Date: Apr 2005
Posts: 1,909
Send a message via AIM to jcortes
Default

Im still a bigger fan of FF. never gotten very much spyware since switching from IE to FF. no reason to stop now.
__________________

AIM = jcortestechhelp
jcortes is offline  
Old 09-08-2006, 06:20 PM   #10 (permalink)
Banned
 
Join Date: May 2005
Posts: 7,915
Send a message via Yahoo to talldude123
Default

Quote:
Originally posted by OpticalIllusion
Only thing I HATE about Firefox is that after a half hour or so of useage it's hogging up like 120mb of RAM! I wish I could fix that!

There is a tweak or guide to fix that, i'll search for you.

Here:
http://www.techist.com/showthread.ph...ox+memory+leak
__________________

talldude123 is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 08:03 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.