Ragel was also the source of cloudbleed! So I would definitely understand if cloudflare were wary of using that kind of technique again.
That's not the right way to talk about it. The error was in code that used Ragel but it was all on us. But as part of improving things we have moved away from non-memory safe languages and Ragel was using C.
Ah, I had thought it was a bug in the code generated by ragel. But I guess not!
In a way it was, but it wasn't Ragel's fault. We made an error that ended up with generated C code that contained the bug. Bottom line for us was... use memory safe languages.
Re:Building Fast Interpreters in Rust
by Matthias247 on Monday March 04, 2019 @10:27PM
(#19307863)
As far as I remember not Ragel was the issue, but the code around it.
If you use a Rust parser from inside broken C code which Leaks memory the same thing can happen.
[1] https://www.colm.net/open-source/ragel/