Security Risk?

Sean Kelly sean at f4.ca
Mon Feb 12 09:00:12 PST 2007


Manfred Nowak wrote:
> When a procedure gives a class instance for processing to a module mod
> 
>   class CPP{ int i; /+ ... +/}
>   auto d= new CPP;
>   d= mod.process( d);
> 
> that processing is currently able to hide additional data and methods 
> in that class instance.
> 
> Is somebody able to show that such hidden data and methods cannot be 
> used to endanger the whole system?

D is a systems language.  Using pointers and such, any method is free to 
randomly overwrite application memory if it really wants to.


Sean



More information about the Digitalmars-d mailing list