[Infowarrior] - Serious Security Bugs Found In Android Kernel

[Richard Forno]

Serious Security Bugs Found In Android Kernel

An analysis of Google Android Froyo's open source kernel has uncovered 88 flaws that could expose users' data

	• Matthew Broersma
	• November 2, 2010

ttp://www.eweekeurope.co.uk/news/serious-security-bugs-found-in-android-kernel-11040

An analysis of the kernel used in Google’s Android [1] smartphone software has turned up 88 high-risk security flaws that could be used to expose users’ personal information, security firm Coverity said in a report published on Tuesday.

The results, published in the 2010 edition of the Coverity Scan [2] Open Source Integrity Report, are based on an analysis of the Froyo kernel used in HTC’s Droid Incredible handset.

Enterprise fears

The results arrive as Android is [3] increasing its market share and increasingly being [4] used in the enterprise.

[5] While Android implementations vary from device to device, Coverity said the same flaws were likely to exist in other handsets as well. Coverity uncovered a total of 359 bugs, about one-quarter of which were classified as high-risk.

The report analysed a total of 61 million lines of open source code from 291 widely used projects, including Apache, Linux, PHP and Samba.

While Android’s density of bugs per thousand lines of code was lower than the average found in open source software overall, it was higher than that of the Linux kernel, according to Coverity. The company said some of the bugs appeared to be important enough to have been addressed before the code was released.

Fixes demanded

Coverity said it will hold off releasing the details of the flaws until January to allow [6] Google and handset vendors to issue fixes. The flaws could be patched via an over-the-air update, Coverity said.

Canalys reported on Monday that [4] Android now dominates the US smartphone market with a 44 percent share, up from 33 percent in the second quarter of this year.

While the deployment of Android on large numbers of handsets has allowed the software to claw market share away from competitors such as RIM, some have criticised Google’s “hands-off” approach for [7] harming the quality of Android and its applications.

Article printed from eWEEK Europe UK: http://www.eweekeurope.co.uk

URL to article: http://www.eweekeurope.co.uk/news/serious-security-bugs-found-in-android-kernel-11040

URLs in this post:

	• [1] smartphone : 
http://www.eweekeurope.co.uk/tag/smartphone
	• [2] Open Source : 
http://www.eweekeurope.co.uk/tag/open-source
	• [3] increasing its market share : 
http://www.eweekeurope.co.uk/news/iphone-jumps-into-top-tier-of-mobile-phone-rankings-11011
	• [4] used in the enterprise : 
http://www.eweekeurope.co.uk/news/apple-android-catch-up-to-rim-in-the-enterprise-10505
	• [5] Image : 
http://www.eweekeurope.co.uk/wp-content/uploads/2010/07/htc-droid-incredible.jpg
	• [6] Google : 
http://www.eweekeurope.co.uk/tag/google
	• [7] harming the quality : 
http://www.eweekeurope.co.uk/news/googles-hands-off-approach-damaging-android-8207