Re:Nvidia Security Team: “What if we just stopped using C?”
by adgjlsfhk1 on Monday November 07, 2022 @12:40PM
(#33509192)
ditching C doesn't solve memory leaks but it does solve use after free. A memory leak is a performance problem that isn't generally exploitable. A use after free is almost always a security vulnerability.
[ Parent
| on HN ]
Re:Nvidia Security Team: “What if we just stopped using C?”
by P5fRxh5kUvp2th on Monday November 07, 2022 @02:55PM
(#33511439)
quick, someone tell everyone locking up resources without releasing them isn't exploitable for bad actors.
Re:Nvidia Security Team: “What if we just stopped using C?”
by worthless-trash on Monday November 07, 2022 @06:37PM
(#33514098)
Memory leak is better than privesc in most cases of active exploitation.
Re:Nvidia Security Team: “What if we just stopped using C?”
by ndriscoll on Monday November 07, 2022 @10:14PM
(#33515518)
You can use resources after releasing them in pretty much any language. That's maybe not as dangerous as reinterpreting arbitrary memory, but then you can also use object pools for everything in C, which is what some very high performance code I used to work on did.