3 ms·

I'm far from good enough at c/c++ to give you a solid answer here, but basically while yes there are tools that can help, you cannot be 100% protected from issu

by dmoy 7y ago

I'm far from good enough at c/c++ to give you a solid answer here, but basically while yes there are tools that can help, you cannot be 100% protected from issues like this. > is there any way to perform static code analysis and enumerate all code paths that access sensitive resources This starts to get towards something akin to the halting problem. Not exactly, but you can sort of intuit why this doesn't work in practice. The combinatorial explosion kills you.

saalweachter 7y ago
I would say that it's also complicated by the fact that it's a design feature for the web browser and various web pages to have access to sensitive information. So the answer to "Is it possible for the web browser to do X?" is going to be "yes" for a wide range of X's.
UncleMeat 7y ago
It isn't just combinatorial explosion. The number of paths is infinite. So you must use widening or have a finite abstract domain for ay abstract interpretation.