Received: by 2002:a25:ef43:0:0:0:0:0 with SMTP id w3csp664039ybm; Wed, 27 May 2020 05:11:25 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxEo/GCeh6KoM+p0BLccoe/NbLQv87nqo6+he/B07N605uu/CLPyXc/vUoxevAzlCIaZM79 X-Received: by 2002:a17:906:edbd:: with SMTP id sa29mr5880473ejb.128.1590581485292; Wed, 27 May 2020 05:11:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1590581485; cv=none; d=google.com; s=arc-20160816; b=s7L/VsKtbKY6bihELpnff9iBd9HuIY0IY4K2B8cFDn1J7LgFPBxl/aBzFt1z89EByr bIMoIoB1XT7Uvxy9GGjwBBLznASvx8D87z/xm6VsuMysYbxN0wz5Wy+d4I51O0Yp1KRf Y/GmZDEk33iTSI3yex9IG28+DFoAsQ9ASpoRGn275A3dQoJhSxexKgVWwvKkxI/evrrr keyAra5+QvTT1+40P+83yJXnjnq6gFUZjNdldPlWaX+gGDIpxztKWe/BRJQ16FuPjLFQ upqm8ZAjOKxcbYbtZck97qvHpe/o0gw8rwHtwzaJznmxDlf8sN2p2gGi0RZw3T7g29tw swMA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=KSPP+QqMImfHhwneJyxdTK+m/mWOF1LBHIEu32FlwNM=; b=NabLxpcTbQ50KqFIjb3IXlN2grR/EjGJXjKAiphDfi66nbUKa2zb6NmG1rVqYwU6ev GAKJj87sn/zoQoTsUfIwyHXiSMcPdVCnVZsoy6jIwHisg54yY5t1V7Ja6zBZzRaaBqoX HnFsLQrHBDFWeYNygZ4Zku7umuP/xFQ8PhvZamLwkZsi8mTnUgzVxSiHlydXwONgSgoC CmQVb0f9G8om4txyGt2M3jbN5yKFClmscqB7YR46z1OEn8yiQAN8sEbkySTRNYuUQ7lg cL7U6LXMgPCtpQqvrhq3Hg8N+0XeYf5sKsK5NL6UOclLlD6CL4WvP5CfKykPvR6+3buk n96g== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=lXR1DDPL; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id r9si867230edx.535.2020.05.27.05.10.55; Wed, 27 May 2020 05:11:25 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=lXR1DDPL; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2387856AbgE0MIw (ORCPT + 99 others); Wed, 27 May 2020 08:08:52 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:50762 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2387849AbgE0MIq (ORCPT ); Wed, 27 May 2020 08:08:46 -0400 Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C03B7C08C5C2; Wed, 27 May 2020 05:08:45 -0700 (PDT) Received: by mail-wm1-x332.google.com with SMTP id h4so2800117wmb.4; Wed, 27 May 2020 05:08:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=KSPP+QqMImfHhwneJyxdTK+m/mWOF1LBHIEu32FlwNM=; b=lXR1DDPLC4j54d7i3HvGLucspXjPrWIgYC37+qVsv+Yet05CVbTBTpoitY2h8DRNV8 e4tgtRP2hV2jbuhDcLHAiTXtmZs2AXI71HiyxqSaK5OCDSfAYGoLBTAnuDFhs4cyD4hf KU01q4wDZkX3kyofC5oeiKZZfNJQ11IT/3icg2MlAClsX5tGhmWqQNaP4r+8zcOtFiga aBDbLvSwYnf6BHOrOgXcF+GFXZWYoO4SoxgL5eLuFgfKDEp4YM2qRL/lmKjtGVknTicw vMCwFPFeOlOa7x/bQk2NvLGpJj6mSCv8tCYULAehXcPjbeke62V5eKFGtokWoNW/+Cmn oZgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=KSPP+QqMImfHhwneJyxdTK+m/mWOF1LBHIEu32FlwNM=; b=s5r6LbBkFvE2MwjOu/nARReJhkg8q71nmQm+uNpTGMFZNYFpkhYxEuNAP2rkwfdrTv bquVUU2RASrfph3/hCjBQUqJ+NJgY+fFYY1HDnyv/mSxid9lp9YsY80eWbJdlmNsRnNn A3dxGQoZZ5GyA/etErG0V0F13YaoSMfhfTrJ9TrK6+SrQKTuvpotymeSq7rC1ZplL6BO DpkVh3lHp13L/jsGhfgIEOwDjUU8512/4uPqPbXq+JkT/DHkwC8bgl/L6PMkx9117ZsS bq3RbldepedWr+E8C5QHACKPCISsWJ6Hvut1j9pH70Z11jKua3ylhjO56omjUcirVDrT jlSg== X-Gm-Message-State: AOAM531IzkZtlwFB3zM+de5e+akKj7DV1meLTZD5ZegsiSfHERjfvFas hynTlBA9X7uUeE6pDij22KJT7mAJGp7ITW8Tsge70w== X-Received: by 2002:a1c:dc05:: with SMTP id t5mr4214043wmg.112.1590581324183; Wed, 27 May 2020 05:08:44 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Sandy Harris Date: Wed, 27 May 2020 20:08:03 +0800 Message-ID: Subject: Re: Looking for an open-source thesis idea To: Eric Curtin Cc: Kernel development list , Linux Crypto Mailing List Content-Type: text/plain; charset="UTF-8" Sender: linux-crypto-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org Eric Curtin wrote: > Hope I'm not bothering you. I'm looking for a masters thesis idea, ... Here's a report claiming 70% of security bugs involve memory errors. https://www.zdnet.com/article/chrome-70-of-all-security-bugs-are-memory-safety-issues/ Build a tool to find or fix those? Another report I saw on Slashdot recently said lots of web vulnerabilities were due to problems in widely used open source libraries.