News for hackers. Stuff that matters.
Re:size_t-to-int vulnerability in Linux’s filesystem layer by csharptwdec19 on Tuesday July 20, 2021 @12:29PM (#27895884)
Same for C#. Any narrowing truncation needs to be an explicit cast. Widening is typically allowed implicitly, although in the case of the 'decimal' (128 bit struct representing a 'higher precision' floating point) type you still need an explicit cast from a 'double', since there are cases where that conversion can still change the value or fail (i.e. Infinity/NaN)
Re:size_t-to-int vulnerability in Linux’s filesystem layer by pjmlp on Tuesday July 20, 2021 @01:06PM (#27896357)
Microsoft is considering turning on by default checked arithmetic in the 2022 Visual Studio templates, by the way.