News for hackers. Stuff that matters.

A comment on Curl is C. Parent comment

Re:Curl is C by steveklabnik on Monday March 27, 2017 @10:57AM (#13968220)
> therefore be just as vulnerable in production.

I think there's two components here: yes, this might lead to a _logic bug_, but it should never lead to a _memory safety_ bug. That is, to get that CVE, you need both, and Rust will still protect you from one.

[ Parent | on HN ]
Re:Curl is C by ars on Monday March 27, 2017 @07:57PM (#13972867)
No, by default rust production builds run without memory safety turned on.

Edit: I believe I confused rust with another language.

[ Parent | on HN ]
Re:Curl is C by steveklabnik on Monday March 27, 2017 @08:09PM (#13972907)
What do you mean?
[ Parent | on HN ]