News for hackers. Stuff that matters.

A comment on Stranger Strings: An exploitable flaw in SQLite. Parent comment

Re:Stranger Strings: An exploitable flaw in SQLite by oconnor663 on Tuesday October 25, 2022 @01:48PM (#33333885)
In this case Rust (or Go or Java or almost anything other than C/C++) would've caught this error with array/slice bounds checks. The borrow checker is usually more concerned with things like use-after-free, where other languages would lean on garbage collection.
[ Parent | on HN ]
Re:Stranger Strings: An exploitable flaw in SQLite by 0x457 on Tuesday October 25, 2022 @02:14PM (#33334205)
Nah, in Rust out-of-bound index would be a panic, which is better than RCE.

I don't think SQLite needs to be rewritten in any language, tho.

[ Parent | on HN ]
Re:Stranger Strings: An exploitable flaw in SQLite by oconnor663 on Tuesday October 25, 2022 @02:18PM (#33334252)
Yeah to be clear by "caught" I mean "crashed cleanly at runtime".
[ Parent | on HN ]