Android Froyo ships with defects, says researcher

 

Hundreds of 'high risk' flaws claimed.

The central kernel of the new version of the Android mobile operating system, codenamed Froyo, has hundreds of defects, according to new research.

The study, undertaken by Coverity, revealed 359 flaws, with 25 percent of of them rated “high risk.”

This rating meant they were likely to cause a security breach or crash a device running the operating system.

Andy Chou, chief scientist and co-founder of Coverity, said: “The... results for the Android kernel we tested show a better than average defect density, meaning this specific kernel is shipping with fewer defects than the industry average for software of this size.

"However, a significant number of these defects are the high risk types that our customers typically fix before shipping their products to market.”

Chou said the aim of the report was to give the makers of the software a chance to fix things before they became a problem but the Android study was of Froyo, which is already shipping in a number of mobile devices.

The report looked into a variety of open source projects including Linux, Apache and PHP. Across all the kernels studied, half of the flaws found were also ranked as high risk.

"Open source software, like Android, is cemented into the software supply chain of fast-moving OEMs in the mobile device industry,” added Chou.

“This creates heavy demand for visibility into the integrity of open source code shipping in modern mobile devices."

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Android Froyo ships with defects, says researcher
"...or perhaps paying people to formulate attacks on end-user devices seemed like a bad idea? How would you feel if you found out Google paid someone to hack into your phone?"
By Ace
 
Tags
 
 
Comments: 5
bcmobile
Nov 4, 2010 7:50 AM
I wonder how many defects you would find in Windows 7, OSX, iOS4 if their source code was open to public scrutiny.

Many, I suspect!
BrissyBoy
Nov 4, 2010 8:06 AM
hmmm, perhaps your answer is in the text of the article - "The... results for the Android kernel we tested show a better than average defect density, meaning this specific kernel is shipping with fewer defects than the industry average for software of this size."

The key to this article is not the volume of defects in the OS but the type of defect in this particular OS - that Android Froyo is shipping with a unusually high number of "high risk" defects, that is 25% of the defects are "high risk" and this is unusual.

No software is defect free, it is really how many defects are exhibited per 1000 lines of code, and there impact/severity.
Ace
Nov 4, 2010 10:39 AM
So where did Coverty come across the list of defects? In the bug reports? How did it determine what was 'high risk'? I'm betting they didn't pore though the source looking for defects. And anyone who knows anything about open source knows, releases don't 'ship' in the traditional sense, as in, on a CD/DVD. You download a revision that you're happy with...which could be today, tomorrow, or next week. Additionally, device manufacturers add their own updates which may fix bugs, or add new ones.
ITnovice
Nov 4, 2010 5:50 PM
Perhaps these defects are the reason Google opted to leave Android out of the paid public security testing.
Ace
Nov 5, 2010 1:37 PM
...or perhaps paying people to formulate attacks on end-user devices seemed like a bad idea? How would you feel if you found out Google paid someone to hack into your phone?
Comments have been disabled for this article.
 
 
 
Top Stories
Australian miners send drones to work
In-depth: Unmanned aerial vehicles in the resources sector.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  20%
 
No
  80%
TOTAL VOTES: 507

Vote