3 ms·
I get that I could write my security model incorrectly in any language. My objection to C is that unchecked pointers can be used to arbitrarily corrupt parts of
by prodigal_erik 17y ago
I get that I could write my security model incorrectly in any language. My objection to C is that unchecked pointers can be used to arbitrarily corrupt parts of the program that would otherwise work correctly. But it sounds like you've found that removing these infamous classes of vulnerabilities doesn't actually help--can you explain why that is?
- tptacek 17y agoBecause there are many other infamous classes of vulnerabilities, many of which are abetted by high-level languages. You don't find a lot of "remote file inclusion"-style flaws in C code, for instance.