Holy mackerel. This seems excessive, and there’s gotta be so much nasty stuff hidden and/or forgotten in there. Is the Intel driver as large?
Meanwhile the open-source NVIDIA “Nouveau” driver is around 201k (21.7k blank lines, 24.3k lines of comments, and 155k lines of code). Or the Intel i915 DRM kernel graphics driver is around 381k lines via the same cloc judgment.
Definitely some backdoors right in there.
It’s open source. If there were backdoors people would’ve noticed.
Open source code isn’t immune to exploits. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior.
The upside of open source is that a well intentioned person might find a vulnerability and get it fixed. Up until then it might be someone’s 0 day.
You’re talking about exploits. They were talking about backdoors. The are not the same thing.
Open source code isn’t immune to backdoors. It’s impossible to exhaustively test every interaction in massive code bases for unintended behavior.
The upside of open source is that a well intentioned person might find a backdoor and get it fixed. Up until then it might be someone’s backdoor.
Better?
