Sudo and its alternatives
Sudo and its alternatives
Posted Feb 25, 2024 21:18 UTC (Sun) by matthias (subscriber, #94967)In reply to: Sudo and its alternatives by wtarreau
Parent article: Sudo and its alternatives
What are safe and intuitive values if you do out of bounds access, use after free, data races, etc.? Most of the UB is there because it is actually UB on the hardware level.
Of course there is some UB in C that can be reasonably defined (e.g., signed integer overflow). But most security critical bugs are memory safety errors. And these cannot be defined away. If you want to get rid of these you need ownership tracking (the rust way), garbage collection (the java way) or some other runtime tracking (e.g., only allow reference counted pointers).
