Slashdot Mirror


Linux Has Fewer Bugs Than Rivals

sushant_bhatia_progr writes "Wired has an article stating that according to a four-year analysis of the 5.7 million lines of Linux source code conducted by five Stanford University computer science researchers, the Linux kernel programming code is better and more secure than the programming code of most proprietary software. The report, set to be released on Tuesday, states that the 2.6 Linux production kernel, shipped with software from Red Hat, Novell and other major Linux software vendors, contains 985 bugs in 5.7 million lines of code, well below the industry average for commercial enterprise software. Windows XP, by comparison, contains about 40 million lines of code, with new bugs found on a frequent basis. Commercial software typically has 20 to 30 bugs for every 1,000 lines of code, according to Carnegie Mellon University's CyLab Sustainable Computing Consortium. This would be equivalent to 114,000 to 171,000 bugs in 5.7 million lines of code."

20 of 626 comments (clear)

  1. Mistake by StevenHenderson · · Score: 3, Funny
    Windows XP, by comparison, contains about 40 million lines of code

    I think they mean "40 million lines of bugs" :)

    1. Re:Mistake by Kjella · · Score: 3, Funny

      This just in! "Hello world" has 0 bugs per three lines of code! Most stable and secure software ever devised!

      Actually, hello world has the highest ratio of bugs/program complexity I've seen. Depends on who is doing the implementation, I guess.

      Kjella

      --
      Live today, because you never know what tomorrow brings
    2. Re:Mistake by Shachaf · · Score: 1, Funny

      Using HQ9+, I can do it with one character!

    3. Re:Mistake by MyLongNickName · · Score: 2, Funny

      Excessive information hiding exacerbates any bugs in inherent in the system attempting to do the hiding.

      Excessive verbage inclusion exacerbates recipient misunderstanding of the intended message.

      --
      See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
    4. Re:Mistake by Dread_ed · · Score: 4, Funny

      Dammit dbacher, stop making sense and being all rational and stuff!

      We're trying to bash the dogshit out of MS products here and you are messing it up!

      Go to your cubicle!

      --
      When the only tool you have is a claw hammer every problem starts to look like the back of someone's skull.
  2. Congratulations... by kjones692 · · Score: 5, Funny

    ...but while they were going through all those 5.7 million lines of code, would it really have killed them to debug them while they were at it??

    --

    Love the Third Amendment?
  3. Conflict of interest... by BJZQ8 · · Score: 5, Funny

    The problem is that there is very often little vested interest in fixing bugs in closed software...if it can be covered up, then so be it. In open software, there's always a reason, even if it is just to keep people from pointing at your code and laughing.

    1. Re:Conflict of interest... by akadruid · · Score: 4, Funny

      If it can be covered up then it's not a very serious bug. Why spend money fixing bugs that aren't a big deal?

      See Also: Diebold

      --
      "Those who cast the votes decide nothing; those who count the votes decide everything." (attrib. Joseph Stalin)
  4. Re:20-30 bugs per 1000 lines??? by Bachus9000 · · Score: 5, Funny

    A rate of 20-30 bugs per 1000 lines would render most programs unusable.

    Sounds like Windows to me! :-)

    It's a joke, laugh. :)

  5. So in all this code auditing... by eno2001 · · Score: 2, Funny

    ...have they found any SCO bugs? ;P I kid, I kid! Because I love!

    --
    -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
  6. No it doesn't by Noksagt · · Score: 1, Funny
    // This code has fewer bugs per line of code than the Linux Kernel!

    #include expects "FILENAME" or . In this case, perhaps stdio.h. Which means you have a very high bugs/LoC rate.
  7. Update by Tom · · Score: 3, Funny

    Update: 18 hours after posting the study, the Linux kernel team had eliminated all the bugs documented in the study, forcing the researchers to correct the bug count down to 0 per 10,000 lines.

    --
    Assorted stuff I do sometimes: Lemuria.org
  8. Re:What about the ones they missed? by AccUser · · Score: 2, Funny

    Not to be a downer but, how do we know they didn't miss anything?


    Like the man said...

    There are bugs we know we know.
    There are bugs we know we don't know.
    There are bugs we don't know we know.
    There are bugs we don't know we don't know.
    --

    Any fool can talk, but it takes a wise man to listen.

  9. 82, 82, 82 by imploded_monkey · · Score: 1, Funny

    Charlie: 82 what? Raymond: Bugs in the Linux kernel. Charlie: There's a lot more than 82 bugs, Ray. Raymond: 985 total. Oh wait. I forgot, they didn't have rain man count the bugs. They had 5 grad students running some lame source code analysis software. It's definitely 985 bugs then...definitely...

  10. OK by hackstraw · · Score: 2, Funny

    Linux software ... contains 985 bugs in 5.7 million lines of code

    I hope they submitted a patch :)

  11. Sorry I need a more easy to understand metric by Anonymous Coward · · Score: 1, Funny

    How many library of congresses could these bugs fill?

  12. Breaking News!!! by Class+Act+Dynamo · · Score: 2, Funny

    This just in: Microsoft has purchased Stanford University. These rogue researchers have been fired and put in jail on nebulous theft charges. Stanford University announces that Windows is better than Linux according to its research.

    --
    My other computer is a Jacquard loom.
  13. IEFBR14 by iBod · · Score: 3, Funny

    When I walked with dinosaurs (ok, IBM mainframes) as a sysprog, there was a utility program named IEFBR14.

    The purpose of IEFBR14 was to do exactly nothing, and pass a zero return code to the caller after doing the 'nothing' (branching on the return address in register 14 - thus BR 14).

    This was actually more useful than it sounds and was used frequently in MVS JCL (Job Control Language) to make JCL do its thing without having to run a real program in a JCL 'step'.

    Thing is, this program that had to do precisely nothing, had no less than 3 patches issued from IBM. Mostly to do with not clearing R15 (the return code register) correctly.

    Go figure!

    1. Re:IEFBR14 by iBod · · Score: 2, Funny

      Yes, as you say, It allowed the JCL to work its dubious magic with file allocations etc.

      Did you ever figure out condition code interpretation in JCL? It always seemed backwards to me COND(0,4) LE and all that???

  14. Re:How can one be sure by maxwell+demon · · Score: 2, Funny
    The kernel of Windows XP [...] which is composed of the Hal [...]

    This may explain the Windows crashes. "Sorry Dave, I cannot let you do that."
    --
    The Tao of math: The numbers you can count are not the real numbers.