4 ms·
Just give up, they’ll never get it.
by binary132 2y ago
Just give up, they’ll never get it.
- throw16180339 2y agoWhat's to get? It's an unsupported claim with substantial counterexamples in the form of every large C++ project. If everyone in the world gets RAII wrong then it doesn't matter what it's theoretically capable of.
- moralestapia 2y agoSure pal, in an imaginary world where: Apache/nginx don't exist, Chrome/V8 don't exist, Firefox doesn't exist, GCC/Clang don't exist, MySQL doesn't exist, TensorFlow doesn't exist, VLC doesn't exist, and the list goes on and on ...
- Philpax 2y agoevery single one of those has had exploits
- moralestapia 2y agoDid I say they don't? All software has bugs. Is this supposed to be news?
- genrilz 2y agoProblem with memory corruption as a bug is that unlike most classes of bug, memory corruption allows remote code execution. (see return oriented programming for the basic version, block oriented programming for the more complex version that bypasses most (all?) mitigation strategies) There are other types of bug that allow remote code execution like this, such as SQL or command-line injection, but those can be solved with better libraries.* However, memory management requires a strong enough type system in the language. * Sorta, for command-line injection you have to know the way the command you are using processes flags and environmental variables in order to know that the filtering you are doing will work. It is absolutely better to use a library instead if you can get away with it.