I don&#x27;t think it would be worthwhile to rewrite <i>all</i> of glibc, at least not initially.  We should focus first on libraries that parse attacker-controlled input, such as glibc&#x27;s DNS resolver, image libraries, font libraries, etc.  Most of glibc does not parse attacker-controlled input and is probably already safe.