3 ms·
Then Java is also unsafe by the same standard.
by senderista 5y ago
Then Java is also unsafe by the same standard.
- cjbprime 5y agoWhy do you say that? Go's data races can produce memory corruption through bounds checking failures. I'm not aware of Java having that kind of memory corruption.
- josephg 5y agoYes. Java and C# are unsafe by the same standard. Last I checked, they both allow multiple threads to nonatomically modify a raw variable - which can lead to data races and data corruption. I haven't heard of anyone getting RCE out of this class of bug in C# or java though.
- astrange 5y agoIt's common to exploit JavaScript engines with this kind of bug, and JS engines probably have better security teams at this point, so I expect you could get an RCE if you really tried.
- saagarjha 5y agoYes, but those would be bugs in the runtime itself, rather than in the programming language. Java and JavaScript both define behavior of racy code; Go does not.
- fulafel 5y agoJVM semantics[1] don't allow this to corrupt program state arbitrarily, just the data variables in question, right? Whereas in Go.. Search for "corruption" in https://research.swtch.com/gomm https://research.swtch.com/gomm [1] Not just Java, meaning all the many nice JVM languages enjoy this is as well, eg Clojure, Scala etc