Comment by alkonaut
8 years ago
Just stop using pointer arithmetic and manually managed buffers for anything security/safety related already.
Had this proxy been written in nearly any other language it wouldn't have had this vulnerability, like so many similar vulnerabilities.
Using ML or Rust or Java or whatever doesn't magically make all vulnerabilities disappear but it sure makes those that are intrinsic to C disappear. And that's not just a few.
There is just no excuse.
No comments yet
Contribute on Hacker News ↗