Creator of LLVM, Clang, and Swift Says To Not Write Security Critical Code In C/C++

via Digitalmars-d digitalmars-d at puremagic.com
Tue Jul 14 00:43:26 PDT 2015


On Tuesday, 14 July 2015 at 03:35:08 UTC, Jack Stouffer wrote:
> http://article.gmane.org/gmane.comp.compilers.llvm.devel/87749
>
> Safety is one of the more important things that D offers over 
> C++, even though people keep saying C++11/14 makes D 
> unimportant.

Uhm, no. The linked page concludes that security-oriented 
software should be written in languages that trap on integer 
overflow by default.

D  is not better off by having modulo-arithmetics, that means you 
cannot even   catch overflow related issues by semantic analysis, 
since overflow does not exist. There are  C-like languages that 
ensures that overflow is not possible at compile time (by putting 
limits on loop iterations and doing heavy duty proofs).



More information about the Digitalmars-d mailing list