News for hackers. Stuff that matters.
Re:A New Development for Coverity and Heartbleed by pcwalton on Saturday April 12, 2014 @04:40PM (#7579112)
Sadly, bounds checking is the easy part; making sure that pointers can't become dangling is the hard one. Unfortunately, use-after-free is an extremely common security vulnerability in the wild (though it wasn't Heartbleed). We solved use-after-free in Rust, at least technically, although there were quite a few tradeoffs we had to make and the usability of the borrow checker is something we're going to need to work on post 1.0.
Re:A New Development for Coverity and Heartbleed by lbarrow on Saturday April 12, 2014 @05:08PM (#7579212)
The more I read about Rust, the more excited I am about it. When I wrote the great-grandparent comment I had Rust in mind.