News for hackers. Stuff that matters.

A comment on *(char*)0 = 0; - What Does the C++ Programmer Intend with This Code? [video]. Parent comment

Re:*(char*)0 = 0; - What Does the C++ Programmer Intend with... by sargstuff on Tuesday October 17, 2023 @05:09PM (#37921592)
use a malloc that has the extra saftey features, run under an interpreted C, and several other ways to handle it (sandbox program, emulator, etc). Changing the underlying C language should NOT be one of them.
[ Parent | on HN ]
Re:*(char*)0 = 0; - What Does the C++ Programmer Intend with... by AlotOfReading on Tuesday October 17, 2023 @08:27PM (#37923410)
The only way to make C "safe" without modifying the language is to run it in a VM, and even that doesn't fully encompass what people mean by safety.

It's an old language. Some of the fundamental mistakes were just things that were common at the time and only look so bad in hindsight (e.g. strings, locales, nullable pointers, half the k&r standard library). That doesn't mean we can't and shouldn't do better where we can though.

[ Parent | on HN ]
Re:*(char*)0 = 0; - What Does the C++ Programmer Intend with... by pjmlp on Wednesday October 18, 2023 @02:59AM (#37925595)
Example, C++/CLI, if certain code patterns are used the code is no longer considered safe from MSIL verifier point of view.

C and C++ targeting WASM, despite all the security message of how great it is, memory locations inside of the same linear memory segment can still be corrupted, thus providing a way to influence the overall execution logic inside of the sandbox.

[ Parent | on HN ]
Re:*(char*)0 = 0; - What Does the C++ Programmer Intend with... by sargstuff on Wednesday October 18, 2023 @04:09PM (#37934124)
Oh, so time of 4k memory, have a 4k program and want to strictly reserve/add 3.14159 K to 4k program for automated saftey issues?

At time C was written, swapping in/out of memory measured in literal minutes & when fraction of second of execution time, including swapping in/out of memory, was more than several times the average yearly salary of the day (excluding sneaker net intervention)

[ Parent | on HN ]