Re:The Insecurity Industry
by roca on Tuesday July 27, 2021 @01:52AM
(#27969071)
Because safety requires that the language prevent you from doing things and libraries don't have much ability to do that.
Example: C++ shared_ptr gives you reference counting which helps prevent use-after-free errors. However, shared_ptr can't stop you getting a raw pointer or reference to the underlying object, which can then be used to trigger a use-after-free bug.
Example: C++ shared_ptr gives you reference counting which helps prevent use-after-free errors. However, shared_ptr can't stop you getting a raw pointer or reference to the underlying object, which can then be used to trigger a use-after-free bug.