Re:What science can tell us about C and C++'s security (2020)
by UncleMeat on Tuesday August 03, 2021 @08:44AM
(#28048488)
I 100% agree with this. I don't believe that a single human on the planet can write a nontrivial C program that processes untrusted input and contains no security vulnerabilities on their first attempt.
And this is a much much much easier task than having a team develop and maintain such a system over time.
I would say that, honestly.
Or at least: I don't think anybody can reliably write non-trivial programs in C that 100% of the time avoid the kinds of memory-safety bugs that Rust protects against at compile-time. And that's what matters. Humans are fallible, and everyone makes mistakes sometimes.