News for hackers. Stuff that matters.

A comment on Google assigns a CVE for libwebp and gives it a 10.0 score. Parent comment

Re:Google assigns a CVE for libwebp and gives it a 10.0 score by AnthonyMouse on Tuesday September 26, 2023 @12:04PM (#37661360)
I feel like we need for C and C++ what Typescript is for Javascript: Not a language from scratch but something which is as close as possible to the thing everyone is familiar with while doing the thing Rust does. A standard library where everything has the same names, the same kind of C++ objects and templates and RAII etc., change only this and nothing else.

Because otherwise you make people learn 100 other things at once to start using it effectively, and then they don't.

[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by PhilipRoman on Tuesday September 26, 2023 @12:17PM (#37661553)
Indeed, I would kill for a proof assistant that integrates with C
[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by namibj on Wednesday September 27, 2023 @02:31AM (#37670937)
Check out the tooling from the seL4 project. I'm aware they used intermediate levels between raw C and the proof assistant, but I don't see why that should be prohibitive.
[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by aidenn0 on Tuesday September 26, 2023 @12:47PM (#37662041)
Something like this? http://cyclone.thelanguage.org/wiki/Cyclone%20for%20C%20Prog...
[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by AnthonyMouse on Tuesday September 26, 2023 @01:03PM (#37662368)
That isn't the thing Rust does, and is slower, so then people won't use it.

The advantage of Rust is that you can produce efficient safe code. The disadvantage is that you have to learn a different language first, which deters adoption.

[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by raydev on Tuesday September 26, 2023 @12:57PM (#37662244)
I'm asking this into the comment section, since I'm curious if anyone has checked:

Does Zig fill this space in any way? It still allows manual memory management but offers more protections, the specifics I'm unclear on.

[ Parent | on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by UncleMeat on Wednesday September 27, 2023 @08:30AM (#37673663)
Zig is something like this for C, but not C++. There are a number of ongoing attempts to do something like this for C++, but it is very hard and they are all way behind Rust in terms of mindshare.
[ Parent | on HN ]