I cannot consistently write safe C/C++ code

Re:I cannot consistently write safe C/C++ code by millstone on Monday July 17, 2017 @06:55AM (#14787278)

I don't follow your point. Software has to be prepared to deal with abnormal inputs, whether those are from a malfunctioning sensor, or an attacker on the same WiFi hotspot.

Safety is a property of a system and the context in which it's used. Safety is not a property of its individual components, including its code. If your CPU's GPIOs were directly accessible through the Internet, your computer would be hacked too; does that mean your system is not safe?

[ Parent | on HN ]

Re:I cannot consistently write safe C/C++ code by adrianN on Monday July 17, 2017 @03:06PM (#14791416)

A malfunctioning sensor is very unlikely to prepare a specially crafted input that exploits a bug. An intelligent adversary is something completely different.

Your claim that MISRA and standards for safety critical software also provide security against targeted attacks does not really follow.

[ Parent | on HN ]