News for hackers. Stuff that matters.
Re:Securing tomorrow's software: the need for memory safety ... by thephyber on Wednesday February 26, 2025 @04:26PM (#43188428)
Sorry, I’m not a C specialist. What are Fil-C and CHERI? eg. Safe subsets of C, static analysis tools, C toolsets to ensure memory safety?
Re:Securing tomorrow's software: the need for memory safety ... by warkdarrior on Wednesday February 26, 2025 @04:31PM (#43188467)
CHERI is a hardware architecture and instruction set to add safety-related capabilities to processors. See https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ In this context a capability means a way to track and enforce which memory area a pointer can point into. Typically this has to be coupled with a compiler which will initialize the capability for each pointer.

Fil-C seems to be a C variant that adds capabilities and garbage collection. See https://github.com/pizlonator/llvm-project-deluge/blob/delug...