4 ms·

UBSan has a -fsanitize-minimal-runtime flag which is supposedly suitable for production: https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html#minimal-ru

UBSan has a -fsanitize-minimal-runtime flag which is supposedly suitable for production: https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html#minimal-runtime https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html#... So it seems that null-pointer dereferences and integer overflows can be checked at runtime in C. Besides, there should be production-ready C compilers that offer bounds checking.

pjmlp 4y ago
There should but there aren't, GCC had a couple of extensions on a branch like 20 years ago that never got merged. The best is to use C++ instead, with bounds checked library types.
- uecker 4y ago
  You can already get some bounds checking, although more work is needed: https://godbolt.org/z/abx7KE44z https://godbolt.org/z/abx7KE44z
  - pjmlp 4y ago
    Yeah, indeed. Thanks for sharing it.