Comment by justincormack

3 days ago

Most programming languages have array bounds checking now.

Most programming languages are written in C, which doesn't.

Fairly sure that was OP's point.

  • Secure string handling functions like strlcpy() and strlcat() do have bounds checks. Not everyone uses them sadly.

    • And that again, is the point. That stuff should be built-in and almost non-negotiable. It should be a lot more work to do the unsafe thing (see: Rust).

      1 reply →