75% yazamalonda amaphatikiza ma code otsegula akale okhala ndi zovuta

Kampani ya Synopsys kusanthula 1253 malonda codebases ndipo anamaliza kuti pafupifupi onse (99%) a malonda ntchito anawunikiridwa zinaphatikizapo osachepera gwero chigawo chimodzi, ndipo 70% ya kachidindo mu nkhokwe anawunikiridwa anali gwero lotseguka. Poyerekeza, mu kafukufuku wofanana mu 2015, gawo lotseguka linali 36%.

Komabe, nthawi zambiri, nambala yotsegulira ya chipani chachitatu yomwe imagwiritsidwa ntchito sinasinthidwe ndipo imakhala ndi zovuta zachitetezo - 91% ya ma codebase omwe adawunikiridwa ali ndi zigawo zotseguka zomwe sizinasinthidwe kwazaka zopitilira 5 kapena zasiyidwa. osachepera zaka ziwiri ndipo samasungidwa ndi opanga. Zotsatira zake, 75% ya ma code otsegula omwe amadziwika m'malo osungira amakhala ndi zovuta zomwe sizikudziwika, theka lazomwe zimakhala ndi chiopsezo chachikulu. Mu chitsanzo cha 2018, gawo la code lomwe lili ndi chiopsezo linali 60%.

Chodziwika kwambiri pachiwopsezo chowopsa chinali
vuto CVE-2018-16487 (ma code execution akutali) mu library lodash kwa Node.js, mitundu yosatetezeka yomwe idakumanapo nthawi zopitilira 500. Chiwopsezo chakale kwambiri chomwe sichinasinthidwe chinali vuto mu lpd daemon (CVE-1999-0061), yosinthidwa mu 1999.

Kuphatikiza pa chitetezo pamakina a ma code a ntchito zamalonda, palinso malingaliro osasamala pakutsatira malamulo a ziphaso zaulere.
Mu 73% ya ma codebases, mavuto adapezeka ndi kuvomerezeka kwa kugwiritsa ntchito gwero lotseguka, mwachitsanzo, malayisensi osagwirizana (kawirikawiri GPL code imaphatikizidwa muzinthu zamalonda popanda kutsegula chinthu chochokera) kapena kugwiritsa ntchito code popanda kufotokoza chilolezo. 93% yazovuta zonse zamalayisensi zimachitika pa intaneti ndi mafoni. M'masewera, machitidwe enieni, ma multimedia ndi mapulogalamu osangalatsa, zophwanya zidawonedwa mu 59% yamilandu.

Pazonse, kafukufukuyu adapeza zigawo 124 zotseguka zomwe zimagwiritsidwa ntchito m'mabuku onse. Odziwika kwambiri ndi awa: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) ndi jQuery UI (29%). Pankhani ya zilankhulo zamapulogalamu, zodziwika kwambiri ndi JavaScript (yomwe imagwiritsidwa ntchito mu 74% yama projekiti), C++ (57%), Shell (54%), C (50%), Python (46%), Java (40%), TypeScript (36%), C # (36%); Perl (30%) ndi Ruby (25%). Gawo lonse la zilankhulo zamapulogalamu ndi:
JavaScript (51%), C++ (10%), Java (7%), Python (7%), Ruby (5%), Go (4%), C (4%), PHP (4%), TypeScript ( 4%), C# (3%), Perl (2%) ndi Shell (1%).

Source: opennet.ru