Hacker News new | ask | show | jobs
by saddlerustle 1354 days ago
Telegram implements video calling using bunch of sketchy C code same as WhatsApp and Signal. There's no reason to think it's less vulnerable these sort of bugs.
1 comments

"sketchy c code" is a tautology
No, OpenBSD and sqlite exist; "sketchy c code" is only mostly redundant.
Sqlite has had multiple CVEs featuring use-after-free, heap overflows, usage of null pointers, use of uninitialized memory, and array bounds overflows. [1]

Those could all be avoided by not using C.

[1]: https://www.sqlite.org/cves.html