3 ms·
You don't know the business logic of every program. You can't say that a rust program won't have a security issue due to this. `UserAccessLevel > Threshold` L
by hyperhopper 4y ago
You don't know the business logic of every program. You can't say that a rust program won't have a security issue due to this.
`UserAccessLevel > Threshold`
Like there could be a million ways an integer becoming small could mess up something.
Also there are business logic issues as well
- HideousKojima 4y agoSure, but a logic error is a fundamentally different class of error compared to a memory error. The potential harm of a logic error is limited in scope to what the program was written to be able to do. A memory error can lead to arbitrary code execution.
- naniwaduni 4y agoLogic errors can still be security issues, even if they don't violate memory safety.
- HideousKojima 4y agoAbsolutely, and I didn't suggest otherwise. But a logic error generally won't lead to your entire system getting pwned unless the program that has the logic error is one for something like user administration or managing a database etc.