Re:Cross-platform Rust rewrite of the GNU coreutils
by pcwalton on Tuesday March 22, 2016 @11:11PM
(#11341853)
That'd be fine if use-after-free was a corner case that doesn't show up often in practice, but every single exploit at Pwn2Own this year was UAF…
[ Parent
| on HN ]
Re:Cross-platform Rust rewrite of the GNU coreutils
by kbenson on Wednesday March 23, 2016 @12:07AM
(#11342092)
Are we arguing the same thing? If UAF is the cause of security problems, and UAF is undefined behavior now, redefining it under a special mode to mean "this is an error (whether or not the compiler enforces it)" at least clarifies the situation,and lets and included static analysis report an error as needed and capable.
That is, I'm not arguing that as much undefined behavior as possible should be made defined and possible, just that it's defined. That definition may very well be "you are not allowed to do this. Don't do this."