Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

"sketchy c code" is a tautology


No, OpenBSD and sqlite exist; "sketchy c code" is only mostly redundant.


Sqlite has had multiple CVEs featuring use-after-free, heap overflows, usage of null pointers, use of uninitialized memory, and array bounds overflows. [1]

Those could all be avoided by not using C.

[1]: https://www.sqlite.org/cves.html




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: