4 ms·
Exactly right. Test builds can crash; production builds should log errors (and perhaps inform the user).
by lotharbot 10y ago
Exactly right. Test builds can crash; production builds should log errors (and perhaps inform the user).
- cperciva 10y agoThis is a very good strategy for getting dangerous security flaws. BIND's security has improved dramatically since they went all-out on assertions; at least 1/3 of the "crash" bugs would have been remote code execution without the protective crashing.
- lotharbot 10y agosure, that's one of the tradeoffs. For some types of software, that's a dominant consideration. For others, it has little or no relevance.