4 ms·
Get away from languages like C, they said. There are double free, dangling pointer, undefined behavior, they said. Wow, a LOGGER engine that execute arbitrary
by blastonico 5y ago
Get away from languages like C, they said. There are double free, dangling pointer, undefined behavior, they said.
Wow, a LOGGER engine that execute arbitrary code. wow
- oconnor663 5y agoI think the natural point of comparison with C here would be printf().
- SAI_Peregrinus 5y agoPrintf at least doesn't recursively expand the format string.
- lanstin 5y agoAnd one of the good things in Go is that you can pass arbotrary crap to fmt.Printf and it wont crash or overflow anything. So logging errors don't kill you (unlike c or python). Ironically, tho, my tool to scan all our jar files for log4j has revealed a panic in archive/zip, something to do with a zero length file name.
- johnisgood 5y agoRust rewrite when?
- deleted 5y ago[deleted]
- alcover 5y agoThe weakness is in the logger itself here, not Java per se.
- stjohnswarts 5y agoI think it's more about the odds than that "there will never be an arbitrary execution bug in python/javascript/java/rust"