Hunter Hudson/Jon Pincus - On Spot the Bug and Code Quality

Posted By: The Channel 9 Team | Apr 9th, 2005 @ 12:37 AM

Hunter Hudson, development manager, programmer productivity Research center, and Jon Pincus, senior researcher on Microsoft Research, sit down with Charles Torre to talk about spotting bugs and code quality issues in this three-part interview.

Tags: MS Research, Software Testing

Rating:

Views (12,891)

Comments (2)

Downloads

teis

There is a typo in the line

var strConnection="Data Source=c:\\auth\\auth.mdb;"

But a real bug is that when building the SQL query, the user input is not checked, so I could enter my name as "teis' DROP TABLE client": Classic mistake

Maurits
AKA Matthew van Eerde

I have to agree that there is a large difference between the kind of bug that simply stops the app from working (typo in data source parameter) and the kind of bug that allows the app to survive casual testing but which nevertheless leaves a large security hole. The first kind is much easier to catch, but is much less serious in the larger sense.