5 ms·
> I would reframe that as: "if you're ok with buffer overflow malware injection, then C is the language for you!" Nobody has yet figured out how to stop that.
by 7steps2much 4y ago
> I would reframe that as: "if you're ok with buffer overflow malware injection, then C is the language for you!" Nobody has yet figured out how to stop that.
Write manual bound checks and good code in general? Granted you won't be able to catch every vulnerability, but at some point other vectors are so much easier to exploit that you won't have to worry about these anymore.
- burntsushi 4y agoOh, of course! Just write good code! Well kiss my grits. I can't believe the solution has been sitting here staring me in the face all this time. I promise I'll write good code from now on. Scout's honor.
- 6equj5 4y agoEven John Carmack thinks "writing good code" is impossible: https://youtu.be/I845O57ZSy4?t=1351 https://youtu.be/I845O57ZSy4?t=1351 ; p
- WalterBright 4y ago> Write manual bound checks and good code in general? 40 years of C buffer overflows argues that doesn't work.