Earlier quoted context omitted.
I'm curious- what do you think of Fedora? It's in the top 5 distros along with OpenSUSE, Ubuntu, Debian, and Mint, and yet I hardly ever hear people talk about it. I had personally given up on Fedora years ago, but recently was told I should give it a second look and I've not had time to try it out.
It's easily the most secure Linux distro. It has SELinux enabled by default (and it actually works!) and compiles binaries using most of the available hardening features, other than basically any other mainstream distro. They have an excellent testing/QA process, especially given the speed at which they're developing - this results in a very high quality.
I have lost hours debugging mysterious crashes because of SELinux, and it is really not safe to have components unexpectedly crashing when they are part of your core infra.
Plus I guess that like every security frameworks it runs with priviledge, it has a lot of lines of code, is hard to audit, and thus highers the surface of vulnerability.
Hint: they use for instance strcmp a lot http://stackoverflow.com/questions/24353504/whats-wrong-with...
Their code mixes if(){} with the if() else (without braces)
They are sometimes using enums, sometimes #define sometimes magic values to refer to constant values.
You should really read the source code.
Definitively above the average of C code in the wild, still having well known code smell.
I would like to see if PVS studio could confirm my intuition.
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux....