3 ms·
Breaking news: software written in a language with error prone memory management has another security incident related to memory management. Stay tuned for the
by 29athrowaway 4y ago
Breaking news: software written in a language with error prone memory management has another security incident related to memory management.
Stay tuned for the next buffer overflow, use after free, and another easily preventable problem. We will run out of CVE numbers soon thanks to OpenSSL.
If there only were well-known solutions to this problem. Like programming languages that restrict what you can do in terms of memory management... Like Rust.
But hey, don't get distracted by automated memory management solutions, we are too busy fixing memory management problems manually.
- necovek 4y agoI am sure your OpenSSL-like library in Rust with support for using from all other programming languages is coming out any day now?
- 29athrowaway 4y agoMake fun all you want, bro. The days of juggling chainsaws are coming to an end. The NSA is crying.
- steveklabnik 4y agoNo need to wait, at least for TLS https://github.com/rustls/rustls-ffi https://github.com/rustls/rustls-ffi
- necovek 4y agoThanks, that's honestly very nice! I look forward to hearing about it as it becomes more widely used!
- macintux 4y agoYet every time C comes up in a discussion here, someone will insist that it’s fine, that only bad programmers make mistakes. I don’t know Rust, and I love C, but we’re well past the point where one can reasonably argue that careful use of C is good enough.