News for hackers. Stuff that matters.
Re:Retrofitting spatial safety to lines of C++ by TinkersW on Saturday November 16, 2024 @11:23AM (#42157166)
I wonder if google really never had this turned on before? Like this has been available in the C++ standard library for decades(normally as a debug feature to catch errors in development, but some implementations such as MS support it in release also).

Might explain why they claimed 70% of exploits were memory related..

Re:Retrofitting spatial safety to lines of C++ by alpire on Saturday November 16, 2024 @11:52AM (#42157367)
The hardening mode we enabled is quite recent added to libc++. It was proposed in 2022: https://discourse.llvm.org/t/rfc-c-buffer-hardening/65734. It was designed to run in prod, so it's quite fast. Previous debug modes I've seen came with a much higher costs, and therefore weren't (usually) enabled in prod.