3 ms·
Hard to take claims of security seriously for untyped languages which are not provably correct and lack a denotational semantics. Let's start by provably not co
by dreamdu5t 9y ago
Hard to take claims of security seriously for untyped languages which are not provably correct and lack a denotational semantics. Let's start by provably not compiling buffer overflows and memory overreads considering those are the vast majority of RCE and privilege escalation.
- perbu 9y agoC++ is strongly typed. I believe there are frameworks that will give you denotational semantics in C++. It shouldn't surprise anyone that feature X is available in C++. But I acknowledge there are tons of shotguns strewn around everywhere in C++ so you can blow your feet off.
- willtim 9y agoC++ is not "strongly typed" when compared to almost any other statically-typed language, e.g. Ada, OCaml, Haskell or Rust. This is a big part of why it is so insecure.