2 ms·
It's true that humans will inevitably produce software with defects. There are differences in the impacts of these defects. > Javascript for example has simila
by quotemstr 4y ago
It's true that humans will inevitably produce software with defects. There are differences in the impacts of these defects.
> Javascript for example has similar issues where if you're not careful about which keys in a hashmap you write to you can create situations that allow for all kinds of things including arbitrary code execution.
Not without eval() you can't.
> Modern C compilers/runtimes also have bounds checking
No, they don't. There are C-like languages (e.g. C++/CLI) that do, and you can use containers, but no, plain C cannot do bounds checking. There's no room in the ABI for it, at least not without CHERI or ASAN.
> although I've never used it
One of the most dangerous things in the world is giving powerful tools to people who don't know that they shouldn't use them.