3 ms·
What about MISRA C and C++ with static analysis tools? Also all GC languages would pretty easily solve the problem including Java and C#.
by jimbob45 2y ago
What about MISRA C and C++ with static analysis tools?
Also all GC languages would pretty easily solve the problem including Java and C#.
- AlotOfReading 2y agoIt's perfectly possible to write the crowdstrike issue in C/C++ code that will pass any MISRA checker, because MISRA checkers are unable to verify conformance with the standard. It basically says "don't do this" and leaves it up to the developer to ensure. Static analysis tools (broadly) are not powerful enough to ensure memory safety for nontrivial programs without a high developer burden in the form of annotations or restricted language subsets. GC languages are generally not appropriate for kernel level systems programming like crowdstrike was doing. Java has some history in this space, but generally without niceties like garbage collection that typical developers are used to.