News for hackers. Stuff that matters.
Re:The Two Factions of C++ by uecker on Tuesday November 26, 2024 @11:35AM (#42247138)
No, this is not how it works. Even without memory safety, the code has well-defined semantics for correct input, i.e. input that does not trigger undefined behavior. And if you prove your program correct for all inputs, this then implies that it does not have undefined behavior for any input. Memory safety is not a prerequisite for applying formal methods to show correctness.

There are no comments on this comment yet.