3 ms·
That’s the thing - it has to be audited manually. I’m sure I won’t convince you here of the value of static typing but some people think it is.
by tines 9y ago
That’s the thing - it has to be audited manually. I’m sure I won’t convince you here of the value of static typing but some people think it is.
- naasking 9y agoI'm a big static typing fan. That's not particularly relevant to this security consideration though, the TCB is the biggest factor. The C++ compiler and toolchain are a far larger TCB than the C toolchain and this one liner. As long as this reuse problem isn't a persistent pattern in a kernel, then the unsafety is less of a problem than introducing the larger TCB.
- tines 9y agoSorry, I’m not familiar with what a TCB is, and google isn’t being helpful. do you have a link I could read?