Typical security issues in C++: why the GC isn't your enemy

Siarhei Siamashka siarhei.siamashka at gmail.com
Mon Dec 12 15:20:19 UTC 2022


On Monday, 12 December 2022 at 13:22:56 UTC, Adam D Ruppe wrote:
> -release should never have existed. It is absolutely 
> unacceptable to ever use is in real world code under any 
> circumstances.

Well, somebody may claim that it is absolutely unacceptable to 
have real world D code without annotating most of it as @safe 
under any circumstances. If you don't annotate it as @safe, then 
you may accidentally use functions like 
https://dlang.org/library/std/string/from_stringz.html in an 
inappropriate way or have stack variable references escaping the 
scope. Memory safety is more than just bounds checking.

And then -release won't be a problem after your code is @safe.


More information about the Digitalmars-d mailing list