StackOverflow's Java code snippet, which has become the most used of all code snippets, contains a error.
The issue became known to him himself programmer that created the snippet, him Andreas Lundblad. Lundblad is a Java programmer and works at company Palantir. He is one of the leading contributors to StackOverflow, the popular developer Q&A site.
2018, published an academic document, which reported that code snippet that Lundblad had uploaded to site, was what had been duplicated more than any other StackOverflow snippet. Developers copied the code and used it in other open-source projects.
The code snippet was provided in response to a question asked at StackOverflow in September on 2010.
Researchers and academics have discovered that he the code had been copied and embedded in more than 6.000 GitHub Java projects.
Last week, Lundblad admitted in a blog post that the code contained an error that resulted in inaccurate estimates of the size of the files.
Lundblad stated that after publishing the academic paper, reviewed the code and posted a bug fix on his blog.
Fortunately, this error was not very serious. Things would be much worse if there was some serious code vulnerability security, because as we said, the code snippet has been reused in a huge number of projects. It would take months or even years to restore all the affected systems. In addition, a huge number users could be vulnerable to attacks.
Altough copying and pasting a code snippet from StackOverflow is not a good idea and generally unacceptable, many developers do.
The 2018 research paper showed how widespread this practice was in the Java ecosystem. The incident with error, on the other hand, showed how dangerous this practice could prove if the code snippet contained a significant security error.
Another academic research, published in October on 2019 showed that code snippets in StackOverflow do contain vulnerabilities. It's not a lie that developers use to scare each other.
The researchers found significant vulnerabilities in 69 from the most popular C ++ code snippets found on StackOverflow over the last ten years.
These vulnerabilities have been found in 2.859 GitHub projects overall, which indicates that a poor response to StackOverflow can damage an entire ecosystem applications open source.
How useful was this post?
Average rating / 5. Vote count:
No votes so far! Be the first to rate this post.