4 ms·
Heartbleed was not a memory safety issue.
by wglb 5y ago
Heartbleed was not a memory safety issue.
- marcosdumay 5y agoA buffer overflow isn't a memory safety issue?
- wglb 5y agoA buffer overflow is a simple coding issue, not a C-style memory safetey error.
- beaconstudios 5y agoyes it was - it caused the server to read past the end of a ping message and into unrelated memory.
- wglb 5y agoSee how this could have just as well been done in Rust: https://tonyarcieri.com/would-rust-have-prevented-heartbleed-another-look https://tonyarcieri.com/would-rust-have-prevented-heartbleed... Mind you, I am of the firm belief that C is at fault for many of the security vulnerabilities, but this is not one of them.
- beaconstudios 5y agoI'm sure it could, but it was still a memory issue. Rust can have those too.