{"id":99196,"date":"2021-02-18T22:23:30","date_gmt":"2021-02-18T20:23:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-zanyalsya-prodvizheniem-sredstv-bezopasnoj-raboty-s-pamyatyu-v-otkrytom-po"},"modified":"2021-02-18T22:23:30","modified_gmt":"2021-02-18T20:23:30","slug":"google-zanyalsya-prodvizheniem-sredstv-bezopasnoj-raboty-s-pamyatyu-v-otkrytom-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/google-zanyalsya-prodvizheniem-sredstv-bezopasnoj-raboty-s-pamyatyu-v-otkrytom-po","title":{"rendered":"Google travaille sur la promotion d'outils pour un travail m\u00e9moire s\u00e9curis\u00e9 dans le logiciel libre","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

L'entreprise Google a lanc\u00e9 une initiative pour r\u00e9soudre les probl\u00e8mes dans les logiciels open source caus\u00e9s par une gestion de la m\u00e9moire peu s\u00fbre. Selon Google, 70 % des probl\u00e8mes de s\u00e9curit\u00e9 dans Chromium sont dus \u00e0 des erreurs de gestion de la m\u00e9moire, comme l'acc\u00e8s \u00e0 un buffer apr\u00e8s la lib\u00e9ration de la m\u00e9moire qui lui est associ\u00e9e (use-after-free). Une \u00e9tude de Microsoft a \u00e9galement conclu que 70 % de toutes les vuln\u00e9rabilit\u00e9s corrig\u00e9es dans les mises \u00e0 jour de logiciels examin\u00e9es sont dues \u00e0 une gestion de la m\u00e9moire peu s\u00fbre. Une autre \u00e9tude a montr\u00e9 que 53 des 95 vuln\u00e9rabilit\u00e9s identifi\u00e9es dans l'outil curl auraient pu \u00eatre \u00e9vit\u00e9es si le code avait \u00e9t\u00e9 \u00e9crit dans un langage qui garantit une gestion de la m\u00e9moire s\u00e9curis\u00e9e. <\/p>\n

Parmi les exemples des premi\u00e8res initiatives financ\u00e9es par Google et men\u00e9es en collaboration avec l'organisation ISRG (Internet Security Research Group), on note la cr\u00e9ation d'un backend HTTP alternatif pour l'outil curl et le d\u00e9veloppement d'un nouveau module TLS pour le serveur http Apache. Les deux projets ont \u00e9t\u00e9 r\u00e9alis\u00e9s en langage Rust, qui est ax\u00e9 sur une gestion de la m\u00e9moire s\u00e9curis\u00e9e et offre une gestion automatique de la m\u00e9moire, permettant, avec une utilisation appropri\u00e9e (absence d'actions non s\u00e9curis\u00e9es avec des pointeurs en mode unsafe), de se prot\u00e9ger contre des probl\u00e8mes tels que l'acc\u00e8s \u00e0 une zone de m\u00e9moire apr\u00e8s sa lib\u00e9ration, le d\u00e9r\u00e9f\u00e9rencement de pointeurs nuls et le d\u00e9passement de tampon.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u043e\u0439 \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u041f\u041e, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google 70% \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 Chromium \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0431\u0443\u0444\u0435\u0440\u0443 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043d\u0438\u043c \u043f\u0430\u043c\u044f\u0442\u0438 (use-after-free). \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Microsoft \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0448\u043b\u043e \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e 70% \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99196","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google s'engage dans la promotion d'outils pour une gestion de la m\u00e9moire s\u00e9curis\u00e9e dans les logiciels open source | ProHoster","description":"L'entreprise Google a lanc\u00e9 une initiative pour r\u00e9soudre les probl\u00e8mes dans les logiciels open source caus\u00e9s par une gestion de la m\u00e9moire peu s\u00fbre.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-zanyalsya-prodvizheniem-sredstv-bezopasnoj-raboty-s-pamyatyu-v-otkrytom-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0437\u0430\u043d\u044f\u043b\u0441\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u041f\u041e | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u043e\u0439 \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u041f\u041e, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-zanyalsya-prodvizheniem-sredstv-bezopasnoj-raboty-s-pamyatyu-v-otkrytom-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-18T20:23:30+00:00","article:modified_time":"2021-02-18T20:23:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99196","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:54:00","updated":"2022-10-01 23:30:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=99196"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99196\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=99196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=99196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=99196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}