75% nke ngwa azụmahịa gụnyere koodu mmalite mepere emepe nwere adịghị ike

Ụlọ ọrụ Synopsys nyochaa 1253 codebases azụmahịa wee kwubie na ihe fọrọ nke nta ka ọ bụrụ ihe niile (99%) nke ngwa azụmahịa enyochara gụnyere opekata mpe otu akụrụngwa mepere emepe, yana 70% nke koodu dị na ebe nchekwa a tụlere bụ isi mmalite mepere emepe. Maka ntụnyere, na ọmụmụ ihe yiri nke ahụ na 2015, òkè nke oghere mepere emepe bụ 36%.

Agbanyeghị, n'ọtụtụ oge, anaghị emelite koodu isi mmalite mepere emepe nke ndị ọzọ ma nwee nsogbu nchekwa nwere ike - 91% nke codebases enyochala nwere akụrụngwa mepere emepe nke emelitebeghị kemgbe ihe karịrị afọ 5 ma ọ bụ nọrọ n'ụdị gbahapụrụ maka ya. ọ dịkarịa ala afọ abụọ ma ndị mmepe anaghị echekwa ya. N'ihi ya, 75% nke koodu oghere mepere emepe achọpụtara na ebe nchekwa nwere adịghị ike amachaghị nke ọma, ọkara n'ime ha nwere nnukwu ihe egwu. N'ihe atụ nke 2018, òkè nke koodu nwere adịghị ike bụ 60%.

Ihe ọghọm kachasị dị ize ndụ bụ
nsogbu ahụ CVE-2018-16487 (mmebe koodu remote) n'ọbá akwụkwọ lodash maka Node.js, ụdị adịghị ike nke a zutere karịa ugboro 500. Ihe ọghọm nke kacha ochie na-enweghị ike bụ nsogbu na lpd daemon (CVE-1999-0061), degharịrị na 1999.

Na mgbakwunye na nchekwa na ntọala koodu nke ọrụ azụmahịa, enwekwara omume nleghara anya maka nnabata na usoro nke ikikere n'efu.
Na 73% nke codebases, achọpụtara nsogbu na iwu kwadoro iji isi mmalite mepere emepe, dịka ọmụmaatụ, ikikere na-adakọghị (na-abụkarị koodu GPL na-etinye na ngwaahịa azụmahịa na-emegheghị ngwaahịa mmepụta) ma ọ bụ iji koodu na-akọwapụtaghị ikike. 93% nsogbu ikike niile na-eme na webụ na ngwa mkpanaka. N'ime egwuregwu, sistemu eziokwu mebere, ọtụtụ mgbasa ozi na mmemme ntụrụndụ, achọpụtara mmebi na 59% nke ikpe.

Na mkpokọta, ọmụmụ ihe ahụ chọpụtara 124 ụdị akụrụngwa mepere emepe nke a na-ejikarị na ntọala koodu niile. Ndị kacha ewu ewu bụ: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) na jQuery UI (29%). N'ihe gbasara asụsụ mmemme, ndị kacha ewu ewu bụ Javascript (eji na 74% nke ọrụ), C++ (57%), Shell (54%), C (50%), Python (46%), Java (40%), TypeScript (36%), C # (36%); Perl (30%) na Ruby (25%). Ngụkọta nke asụsụ mmemme bụ:
Javascript (51%), C++ (10%), Java (7%), Python (7%), Ruby (5%), Go (4%), C (4%), PHP (4%), TypeScript ( 4%), C # (3%), Perl (2%) na Shell (1%).

isi: opennet.ru