News for hackers. Stuff that matters.

A comment on OpenBSD, C, httpd and SQLite – Web App stack. Parent comment

Re:OpenBSD, C, httpd and SQLite – Web App stack by gaius on Saturday June 09, 2018 @07:06AM (#17272444)
C is a dangerous beast, but with good practices it isn't that dangerous. Of course you have to be extra careful when dealing with user content, like JSON payload, but many decoders in other languages are written in C.

It isn't hard to build tools like Valgrind and AFL into your C workflow. I would take that over simply taking for granted that a higher-level language was secure just because it is interpreted. After all it's probably C under the hood anyway.

[ Parent | on HN ]
Re:OpenBSD, C, httpd and SQLite – Web App stack by marmaduke on Saturday June 09, 2018 @07:46AM (#17272552)
This is a good point: you can CI run tests under Valgrind with various sanitizers and -Wall -Wextra. In a small codebase with a few cores, one can compile and run a test suite faster than it takes for a Django app to start.
[ Parent | on HN ]