News for hackers. Stuff that matters.
Re:A simplified model of Fil-C by tialaramex on Friday April 17, 2026 @08:41PM (#47812149)
It's trickier than it looks because C has mutable aliases. So, in C our bounds check might itself be a data race! Make sure you cope
Re:A simplified model of Fil-C by uecker on Friday April 17, 2026 @09:35PM (#47812436)
Depending on what you are doing, yes. But the statement I responded to "your only choice is crash" is certainly wrong.
Re:A simplified model of Fil-C by jstimpfle on Sunday April 19, 2026 @09:03AM (#47824009)
Bounds checks have nothing to do with data races. GP is right, you can add bounds checks. Either using macros or (in C++) with templates and operator overloading.
Re:A simplified model of Fil-C by tialaramex on Wednesday April 22, 2026 @11:51AM (#47865390)
Alas, in C or C++ you have mutable aliasing, so I'm afraid you do incur a potential data race because your bounds might alias. Be careful out there.

Also remember that in C++ you may get a reference in these cases and if you keep that reference rather than using it immediately now you also have a potential TOCTOU race because the reference was only valid when you did the bounds check.

Re:A simplified model of Fil-C by jstimpfle on Thursday April 23, 2026 @11:04AM (#47876588)
True, but you do incur potential data races _everywhere_. There's no relation to bounds checking specifically.
Re:A simplified model of Fil-C by tialaramex on Friday April 24, 2026 @11:42AM (#47891788)
Ah, maybe I should have made the example clearer

With mutable aliasing the length might change even though the data you care about did not, and so adding the check means incurring a race which did not previously exist and which certainly the naive C programmer cannot see...

We can definitely mitigate this in the type system for most real world scenarios, but you don't mitigate problems you don't know about, so knowing is what's important.