3 ms·
It is to let you know to not use it, since it is a pile of Memory related CVEs just waiting for the joy of discovery.
by stonemetal12 3y ago
It is to let you know to not use it, since it is a pile of Memory related CVEs just waiting for the joy of discovery.
- zX41ZdbW 3y agoThat's true - C++ libraries are typically bug-ridden and require exhaustive efforts to clean up. But the latest bugs found by ClickHouse continuous integration system in the related library were fixed about a year ago: https://github.com/eBay/NuRaft/pull/373 https://github.com/eBay/NuRaft/pull/373 https://github.com/eBay/NuRaft/pull/392 https://github.com/eBay/NuRaft/pull/392
- jsiepkes 3y agoIf even Google, Mozilla, Apple and Microsoft can't get C++ right in their apps with all the fuzing tools they invented I don't have much faith other companies are going to fare better with memory safety and C++.