3 ms·
Have you looked at code by AntiRez, the author of Redis? Redis is written in plain C. What about QMail and DJBDNS, from Dan Bernstein? Again, all C. And the m
by 1024core 6y ago
Have you looked at code by AntiRez, the author of Redis? Redis is written in plain C.
What about QMail and DJBDNS, from Dan Bernstein? Again, all C.
And the mother of all: the Linux kernel. Again, in C.
- rowanG077 6y agoRedis has RCE exploits which would not exist in a memory safe language [1]. QMail had an RCE as well[2] and DJBDNS has had a security bug which would not have occurred in a memory safe languages [3]. The linux kernel has had an incredible amount of memory bugs over the years. The software you mentioned does much, much better then the average C written code. But it still has had issues with memory. So in fact all your examples prove my point. [1] https://github.com/jas502n/Redis-RCE https://github.com/jas502n/Redis-RCE [2] https://www.qualys.com/2020/05/19/cve-2005-1513/remote-code-execution-qmail.txt https://www.qualys.com/2020/05/19/cve-2005-1513/remote-code-... [3] https://web.archive.org/web/20190126114638/http://article.gmane.org/gmane.network.djbdns/13864 https://web.archive.org/web/20190126114638/http://article.gm...