Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by Aeolos on Tuesday September 26, 2023 @12:30PM
(#37661759)
For people downvoting, could you please explain which part of this statement you agree or disagree with?
[ Parent
| on HN ]
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by mxkopy on Tuesday September 26, 2023 @12:44PM
(#37661984)
C is syntactic sugar around assembly. Saying C is outdated is like saying assembly is outdated. At that point, just admit you're not interested in computers
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by callalex on Tuesday September 26, 2023 @01:39PM
(#37662925)
I want to create software that doesn’t harm users. That doesn’t at all imply that I’m not interested in computers. In fact guaranteeing safety for users shows a profound interest in computers.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by oconnore on Tuesday September 26, 2023 @01:00PM
(#37662300)
But assembly _is_ outdated, at least for the purpose of authoring large community software projects.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by bcrosby95 on Tuesday September 26, 2023 @12:56PM
(#37662226)
> C is syntactic sugar around assembly.
The C abstract machine, and the undefined behavior shenanigans compilers are pulling off says otherwise.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by raverbashing on Tuesday September 26, 2023 @12:49PM
(#37662077)
> C is syntactic sugar around assembly
It isn't
As an example, see how C 'int', 'short', 'long' or whatever becomes actual different types
> just admit you're not interested in computers
I have the popcorn ready already for when the next C "hotshot" shoots himself in the foot yet again because he thinks a chainsaw without an emergency brake is just more fun
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by peteradio on Tuesday September 26, 2023 @03:38PM
(#37664773)
> chainsaw without an emergency brake is just more fun
Fun and fast!
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by bigbillheck on Tuesday September 26, 2023 @02:07PM
(#37663415)
> C is syntactic sugar around assembly.
Even if this is true (and I don't believe it is), it's not useful.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by ryeights on Tuesday September 26, 2023 @03:26PM
(#37664602)
All programming languages are syntactic sugar around processor instructions
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by eqvinox on Tuesday September 26, 2023 @06:13PM
(#37666476)
The design of io_uring has nothing to do with the language the Linux kernel is implemented in. And safer languages really can't provide guarantees when the issue at hand is designing a shared memory cross-executable (kernel⋄userspace) API.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by chlorion on Tuesday September 26, 2023 @07:08PM
(#37667104)
Just having first class slice types, where your pointer is paired with a length, which allows for doing bounds checking automatically is a huge upgrade over C, even if it doesn't solve every other problem.
Security exploits from out of bounds access should not be happening today, bounds checking is a solved problem, and has been solved for decades.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by pjmlp on Wednesday September 27, 2023 @03:43AM
(#37671413)
Time to make the point that not even C authors were able to change WG14 mind on the necessity of having fat pointers.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by winter_blue on Wednesday September 27, 2023 @10:57AM
(#37675570)
That's a pretty interesting paper. Thanks for sharing it. I wonder why Dennis Ritchie, with the weight his name carries, wasn't able to push it into mainstream implementation...