Re: [Gnu-arch-users] Re: Tlacontrib contribution: Alternative to .listing files

[Adrian Irving-Beer]

On Wed, Sep 22, 2004 at 10:17:06AM -0400, Stefan Monnier wrote:

> > but it's in C, so it is faster and more secure.
>
> Hmm.... since we care about security, wouldn't it be better to use
> something else than C (like something where buffer-overflows are
> simply not possible)? Maybe Perl, Python, Scheme, Elisp, or ... ?

I think C is safe if you make sure all your operations on string
buffers carefully cap the size, and don't do weird junk with pointers.

In fact, even though I know all those languages can be generally close
to 100% safe for this operation, technically a 'safe' C script would
still be safer because every single operation is explicitly stated,
rather than left up to the interpretor (i.e. unknown and with
potential to change).

signature.asc
Description: Digital signature