Re:Nvidia Security Team: “What if we just stopped using C?”
by pclmulqdq on Monday November 07, 2022 @11:17AM
(#33507790)
There are an incredibly large number of analysis tools for C to check things like memory safety. It doesn't look like they are always used in important code, though.
A lot of memory safety CVEs come down to "we wrote a static analyzer and found a latent memory bug here."
A lot of memory safety CVEs come down to "we wrote a static analyzer and found a latent memory bug here."