Re:size_t-to-int vulnerability in Linux’s filesystem layer
by jeffbee on Tuesday July 20, 2021 @12:01PM
(#27895409)
It isn't ever a good idea. C programmers are just supposed to know about the conversion and promotion rules, every time they add a line, even though the rules are actually insanely complicated. Compiler warnings can't overcome this because programmers have no way of just discovering one of GCC's 726 warning flags, only a few of which are enabled by -Wall and -Wextra, most of which are way too noisy to serve a useful purpose.
[ Parent
| on HN ]
There are no comments on this comment yet.