dip1000 and preview in combine to cause extra safety errors

Paolo Invernizzi paolo.invernizzi at gmail.com
Thu Jun 9 08:57:12 UTC 2022


On Thursday, 9 June 2022 at 06:53:55 UTC, Walter Bright wrote:
> The point of @safe by default for C declarations was:
>
> 1. so that we would not be deluged with complaints about 
> breaking existing code
>
> 2. so people would use it
>
> What people *will* do with C unsafe by default is:
>
> 1. slap `@trusted:` at the beginning and go on their merry way, 
> and nothing was accomplished except annoying people

As said during the infinitely long thread about that in the past, 
rejecting a slapped '@trusted:' is work for code reviewers if 
your company minds for safety.

But please, not again that discussion.
(said that, if there was a -preview with @safe-as-default but 
@system extern(C) that will become the default in our codebase)




More information about the Digitalmars-d mailing list