Only as safe as the language implementation
Posted Sep 19, 2003 8:06 UTC (Fri) by
ibukanov (subscriber, #3942)
In reply to:
Only as safe as the language implementation by hazelsct
Parent article:
A bad week
Coding in a safe language does NOT increase amount of potentially unsafe code, while writing a new C code very much does. One may hope that a compiler or runtime with a minimal C or assembler core will be made bug free while coding new staff in C will only incease amount of efforts to check.
Also, such runtime cores themselves do not use dynamic memory allocation (they have to implement it!) or extensive operations on C-style strings and it is easier to proove soundness of the implementation. In addition, bugs there much harder to explore since an exploit has to penetrate first working defences.
(
Log in to post comments)