Direction for @safe/-dip1000

[H. S. Teoh]

On Mon, Feb 14, 2022 at 01:15:26PM +0000, Paul Backus via Digitalmars-d wrote:
> On Monday, 14 February 2022 at 08:39:58 UTC, Walter Bright wrote:
[...]
> > Yes, although @safe does not supply complete memory safety. The
> > addition of @live fills in much of the rest.
> 
> Huh? My understanding is that modulo compiler bugs and incorrect use
> of @trusted, @safe code should be 100% memory safe, even without
> @live.

The problem with @safe as it is implemented today is that it's
implemented as a blacklist rather than a whitelist.

Cf. points 2 and 3 (as applied to memory safety) in:

	http://ranum.com/security/computer_security/editorials/dumb/index.html


T

-- 
Once the bikeshed is up for painting, the rainbow won't suffice. -- Andrei Alexandrescu