News for hackers. Stuff that matters.

A comment on How Safe Is Zig?. Parent comment

Re:How Safe Is Zig? by dnautics on Monday March 22, 2021 @02:28PM (#26544751)
technically that's exactly the 'hard' problem, since QOP and QH are 'dealing with database problems' and not low-level problems like memory safety.
[ Parent | on HN ]
Re:How Safe Is Zig? by masklinn on Monday March 22, 2021 @02:51PM (#26545069)
QOP/QH are not the point, they're ways to reach the existing memory corruption. Without the memory safety issue you can reach QOP/QH are not useful.
[ Parent | on HN ]
Re:How Safe Is Zig? by dnautics on Monday March 22, 2021 @03:03PM (#26545265)
IIRC, QOP/QH though requires the somewhat unfortunate way that tables are laid out and initialized in SQLite, so it was my impression that QOP/QH are the highest order problem that needs to be patched; after all there are other types of vulns that aren't memory safety problems that are reachable with QOP/QH.
[ Parent | on HN ]