News for hackers. Stuff that matters.

A comment on Several months in the life of Project Zero – Part 1: The Chrome bug of suffering.

Re:Several months in the life of Project Zero – Part 1: The ... by ufmace on Wednesday February 12, 2020 @01:31PM (#22311344)
I don't really understand this level of memory manipulation and exploit construction very well right now. But I notice that the usual Rust advocates are big on boosting how the language restrictions and constructs block these sorts of things. Can anybody comment on how many of the steps they used could actually be prevented by using Rust for this module?
[ Parent | on HN ]
Re:Several months in the life of Project Zero – Part 1: The ... by steveklabnik on Wednesday February 12, 2020 @03:53PM (#22312690)
If I had to summarize it, it would be:

> C-style programming in C++ is also a bad sign; the IOBuffer design pattern with separate storage of buffers and their sizes is inherently dangerous.

Rust has "slices", which store a pointer and a length together, so they cannot get out of sync like this.

[ Parent | on HN ]