2 ms·
"In some cases you are safe in other cases you aren't" is not good enough for real safety. Congrats if you never write bugs. For the rest of us, we will use th
by UncleMeat 3y ago
"In some cases you are safe in other cases you aren't" is not good enough for real safety.
Congrats if you never write bugs. For the rest of us, we will use the widely available data that demonstrates that these bugs recur over and over and over and over even in organizations with strong developers, strong testing culture, and where the use of static analyzers and fuzzing is widespread.
Yes, C also has these problems. Both C and C++ represent significant safety risks, despite powering some of our absolute most security critical applications (the linux kernel and our web browsers). Other languages don't give you these footguns.