News for hackers. Stuff that matters.

A comment on A Guide to Undefined Behavior in C and C++ (2010). Parent comment

Re:A Guide to Undefined Behavior in C and C++ (2010) by pjmlp on Sunday November 04, 2018 @07:05AM (#18375477)
There is a whole OS, good enough?
[ Parent | on HN ]
Re:A Guide to Undefined Behavior in C and C++ (2010) by gbw on Sunday November 04, 2018 @08:39AM (#18375798)
If you mean Redox, that is hardly a production OS (yet).

People don't have infinite time and only search for security issues in software that's actually in use.

Which is one of the reasons that C/C++ appear more often in CVEs.

[ Parent | on HN ]
Re:A Guide to Undefined Behavior in C and C++ (2010) by pjmlp on Sunday November 04, 2018 @09:01AM (#18375893)
The OP asked for an example of a large program like BIND, I gave him/her an OS, which naturally also contains something like BIND, but apparently we now move the goal posts for how much users it has.

I love how people hand have the fact that even projects like the Linux kernel, with their stringent processes aren't able to avoid CVEs, to the point it became the major focus of Linux Kernel Security Summit 2018.

Yet we all know that only newbies do major errors in C. /s

[ Parent | on HN ]
Re:A Guide to Undefined Behavior in C and C++ (2010) by sethammons on Sunday November 04, 2018 @08:10AM (#18375683)
Depends on popularity and use.
[ Parent | on HN ]
Re:A Guide to Undefined Behavior in C and C++ (2010) by pjmlp on Sunday November 04, 2018 @09:19AM (#18375959)
The question was about an example for a large program like BIND.
[ Parent | on HN ]
Re:A Guide to Undefined Behavior in C and C++ (2010) by sureaboutthis on Sunday November 04, 2018 @08:25AM (#18375741)
Which one?
[ Parent | on HN ]