Bug Bounty for C??

Thread Starter

IBO3252

Joined May 17, 2023
18
Hi guys
I stumbled recently on the bug bounty concept but as far I searched it's exclusively for web related programming languages
So is there a similar program that award bounties for C bugs discoveries?
 

Papabravo

Joined Feb 24, 2006
22,082
Hi guys
I stumbled recently on the bug bounty concept but as far I searched it's exclusively for web related programming languages
So is there a similar program that award bounties for C bugs discoveries?
Are we talking about bugs in a C compiler or in some application code?
 

WBahn

Joined Mar 31, 2012
32,823
Hi guys
I stumbled recently on the bug bounty concept but as far I searched it's exclusively for web related programming languages
So is there a similar program that award bounties for C bugs discoveries?
These aren't exclusively for anything -- bug bounties go way back. The first digital electronics textbook I had was a first edition that offered a $5 bounty for every first-report of an error. When I bought it, it came with the usual two pages of errata. The second edition was notably missing the bounty offer.

While the maker of a particular C compiler MIGHT offer a bounty -- you need to check with the specific compiler vendor.
 

WBahn

Joined Mar 31, 2012
32,823
Hi Papabravo,

Bugs in application code maybe related to embedded code too but not inclusive though.
That doesn't answer the question.

Is the bug you are referring to an error in the source code, or an error in the executable that is due to a bug in the compiler?
 

Thread Starter

IBO3252

Joined May 17, 2023
18
That doesn't answer the question.

Is the bug you are referring to an error in the source code, or an error in the executable that is due to a bug in the compiler?
Actually, I don't know.
My aim was finding anything bug related to C Lang. , I think finding an error in a source code would be harder hence most of programs code isn't shared. I will go with the latter could u suggest a bounty program for compiler bugs?

Thanks for the quick response
 

WBahn

Joined Mar 31, 2012
32,823
Actually, I don't know.
My aim was finding anything bug related to C Lang. , I think finding an error in a source code would be harder hence most of programs code isn't shared. I will go with the latter could u suggest a bounty program for compiler bugs?

Thanks for the quick response
As I said before, you need to check with the vendor of the specific compiler. This is like asking if there are bug bounties for problems with cars -- Toyota might offer one, but they aren't going to pay bounties for bugs in Hondas. So if you have a Honda, you need to check with Honda to see if they have a bounty for bugs in their cars.

It sounds like you aren't asking this question because you think you have already found a bug, so are you thinking that you are going to make a lot of money by starting to look for bugs? If so, don't quit your day job -- most bugs are found by accident, not by looking for them. You write a program and notice that it doesn't do what you think it should. So you immediately see dollar signs because you think you've found a bug. But, almost always, when you look hard enough, you discover either that you had a bug in your code (I guess you could pay yourself a bounty) or you misunderstood what you thought it should have done and it is actually doing exactly what you told it to.

Now, if you are a highly skilled hacker, you can actually look for vulnerabilities in code, but even then few people discover any and far fewer still ever find more than one.
 

Papabravo

Joined Feb 24, 2006
22,082
As I said before, you need to check with the vendor of the specific compiler. This is like asking if there are bug bounties for problems with cars -- Toyota might offer one, but they aren't going to pay bounties for bugs in Hondas. So if you have a Honda, you need to check with Honda to see if they have a bounty for bugs in their cars.

It sounds like you aren't asking this question because you think you have already found a bug, so are you thinking that you are going to make a lot of money by starting to look for bugs? If so, don't quit your day job -- most bugs are found by accident, not by looking for them. You write a program and notice that it doesn't do what you think it should. So you immediately see dollar signs because you think you've found a bug. But, almost always, when you look hard enough, you discover either that you had a bug in your code (I guess you could pay yourself a bounty) or you misunderstood what you thought it should have done and it is actually doing exactly what you told it to.

Now, if you are a highly skilled hacker, you can actually look for vulnerabilities in code, but even then few people discover any and far fewer still ever find more than one.
To put a really fine point on the matter I have not encountered anyone in a career that lasted half a century that actually made a living in this fashion. I did get a few "attabois" though, but you can't pay the bills with those. This would be in the same category as "influencers".
 
Last edited:
Top