News for hackers. Stuff that matters.
Re:This shouldn't have happened: A vulnerability postmortem by Twisol on Wednesday December 01, 2021 @03:49PM (#29408948)
I suspect Ada would make the cut, with the number of times it's been referenced in these contexts, but I haven't actually taken the time to learn Ada properly. It seems like a language before its time.
Re:This shouldn't have happened: A vulnerability postmortem by pyjarrett on Wednesday December 01, 2021 @07:00PM (#29410766)
Re:This shouldn't have happened: A vulnerability postmortem by IshKebab on Wednesday December 01, 2021 @05:48PM (#29410173)
As I understand it it's only memory safe if you never free your allocations, which is better than C but not an especially high bar. Basically the same as GC'd languages but without actually running the GC.

It does have support for formal verification though unlike most languages.

Re:This shouldn't have happened: A vulnerability postmortem by pyjarrett on Wednesday December 01, 2021 @06:59PM (#29410758)
> if you never free your allocations

Technically, it used to be memory safe before this and they rolled back the restrictions to allow "unchecked deallocation".

Pointers ("Accesses") are also typed, e.g. you can have two incompatible flavors of "Widget*" which can't get exchanged which helps reduce errors, and pointers can only point at their type of pointer unless specified otherwise, are null'd out on free automatically and checked at runtime. In practice, you just wrap your allocations/deallocations in a smart pointer or management type, and any unsafe usages can be found in code by looking for "Unchecked" whether "Unchecked_Access" (escaping an access check) or "Unchecked_Deallocation".

The story is quite different in Ada because of access type checks, it doesn't use null-terminated strings, it uses bounded arrays, has protected types for ensuring exclusive access and the language implicitly passes by reference when needed or directed.

My experience with writing concurrent Ada code has been extremely positive and I'd highly recommend it.

Re:This shouldn't have happened: A vulnerability postmortem by pjmlp on Thursday December 02, 2021 @03:02AM (#29413647)
Ada has improved a lot since Ada 83, it is quite easy to use RAII since Ada 2005.