Re:The Insecurity Industry
by the_why_of_y on Tuesday July 27, 2021 @05:38PM
(#27977980)
> The CompCert C reference interpreter aborts execution on undefined behavior.
A C interpreter is not exactly the sort of thing that the embedded software industry has been waiting to deploy in production.
> To be clear, when we talk about "an alternative implementation of C", it needs to give similar performance and other properties (e.g. function and data interop) to other C compilers. You can't impose a 3-5x slowdown and say "look, C is safe".
Pretty much every language (except rust) which claims to be "C but safe" has the same issue, except you have to rewrite your program in it.