A serious security bug... caused by no bounds checking.

Kagamin spam at here.lot
Mon Apr 7 23:30:01 PDT 2014


On Tuesday, 8 April 2014 at 01:59:50 UTC, Ary Borenszweig wrote:
> On 4/7/14, 8:28 PM, w0rp wrote:
>> http://heartbleed.com/
>>
>> This bug has been getting around. The bug was caused by 
>> missing bounds
>> checking.
>>
>> I'm glad to be using a language with bounds checking.
>
> http://www.reddit.com/r/programming/comments/21m0bz/warp_a_fast_c_and_c_preprocessor/cged2y6
>
> I think that flag shouldn't exist.

The flag is useful if the program works in a trusted environment 
like a developer compiling his own code on his own machine.


More information about the Digitalmars-d mailing list