Hacker News new | ask | show | jobs
by pjmlp 1171 days ago
And zero focus on improving the root causes of memory corruption due to strings and array indexing errors.

The security world will keep burning it seems.

1 comments

> The security world will keep burning it seems.

There is no alternative to network protocols and IPC that the stringtypes C has. You get a length and a byte array. If you trust the user, you can assume length is correct. Otherwise no.

Sure there are, as proven by distributed networking stacks not written in C.

In fact Ethernet early days goes back to Mesa not C.

UNIX did not invent networking, networking predates UNIX for at least a decade.

> Sure there are, as proven by distributed networking stacks not written in C.

this has nothing to do with the C language, but the structure of information. If the datatype contains a length, it has to be serialized anyway. There is no way of fixing this.