News for hackers. Stuff that matters.
Re:The Heartbleed Bug by hackinthebochs on Tuesday April 08, 2014 @11:09AM (#7553858)
I don't think this is true. When it comes to copying bytes from a buffer supplied from the network, there isn't a wrapper/manager class that can do this for you. Somewhere down the pipeline some piece of code has to copy the unstructured, variable length byte stream into a manageable data structure. C++ does not give any way to do this beyond the mechanisms available in C.
Re:The Heartbleed Bug by scott_s on Wednesday April 09, 2014 @10:37AM (#7559514)
What you can do is lower the surface area of vulnerability. Low level byte wrangling is kept in a small subset of generic classes and functions. Application logic then only uses the safe interfaces.