Re:Will Carbon Replace C++?
by kazinator on Monday February 27, 2023 @09:45PM
(#34965036)
You can write completely memory-safe code using nothing but C++98 features, like templated smart pointers and whatnot, which wrap around the unsafe parts of your code. You can keep that unsafe part small and get it right "by inspection"; then if it's used through the higher level primitives, it cannot be misused.
[ Parent
| on HN ]
The problem is that there's no way to automatically check any of that.
If the code is small and doesn't change or doesn't have to last for too long, that's OK. But when it's changed over the years, it's pretty much impossible to guarantee that the unsafe parts are kept small and contained, especially as programmers leave and new ones come in.