3 ms·
You are free to collect data and publish a revolutionary result in ICSE or whatever. Until then I'll go with the mountains of data showing the existence of thes
by UncleMeat 4y ago
You are free to collect data and publish a revolutionary result in ICSE or whatever. Until then I'll go with the mountains of data showing the existence of these bugs in codebases despite adoption of smart pointers, etc. You can even see the pain in the adoption of string_view as a clear example of how you end up with non-owning references in real modern C++ code that fucks up lifetimes and ends up with UAFs. You don't need a "new" anywhere in your entire codebase to still end up with UAF.
I also spoke about way more than memory errors. C++ has a million other footguns that people regularly fire beyond accessing deallocated memory or accessing memory out of bounds of an allocation.