News for hackers. Stuff that matters.

A comment on Chromium project finds that 70% of security defects are memory safety problems. Parent comment

Re:Chromium project finds that 70% of security defects are m... by saagarjha on Sunday May 24, 2020 @01:29AM (#23289360)
This was an enum (class) member, so I didn’t really have one to spare that wouldn’t just hide the issue under the rug.
[ Parent | on HN ]
Re:Chromium project finds that 70% of security defects are m... by logicchains on Sunday May 24, 2020 @02:56AM (#23289710)
Ah, that sucks. I don't think there's a solution to that apart from just adding an "Invalid" field to every enum class and initialising to that, but checking for that (asserting not invalid) adds ugly boilerplate to every usage of every enum.
[ Parent | on HN ]
Re:Chromium project finds that 70% of security defects are m... by saagarjha on Sunday May 24, 2020 @03:19AM (#23289791)
Right. Type systems generally don’t like having invalid states at any point, because after all that’s kind of what they do :)
[ Parent | on HN ]