5 ms·
Ask HN: Would any code analysis tools have caught have caught heartbleed?
If not, why not? Is this kind of issue something that a language feature could avoid?
- cpeterso 12y agoThis blog post demonstrates how OpenSSL's unsafe C code can be migrated to a safe programming language called ATS (Applied Type System): http://bluishcoder.co.nz/2014/04/11/preventing-heartbleed-bugs-with-safe-languages.html http://bluishcoder.co.nz/2014/04/11/preventing-heartbleed-bu...
- pascal_cuoq 12y agoSee http://blog.regehr.org/archives/1125 http://blog.regehr.org/archives/1125 (Heartbleed and Static Analysis)
- macarthy12 12y agoLooks like the FLOSS community needs to start exploring these kind of tools.