News for hackers. Stuff that matters.
Re:This shouldn't have happened: A vulnerability postmortem by zaptheimpaler on Thursday December 02, 2021 @05:25AM (#29414470)
> But a buffer overflow like from the article? That's just a matter of saving the length of the array alongside the pointer and doing a bounds check, which a compiler could easily insert

Both the array length and the index can be computed at runtime based on arbitrary computation/input, in which case doing bounds checks at compile time is impossible.

There are no comments on this comment yet.