[Cryptography] bounded pointers in C

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sun Apr 20 00:26:18 EDT 2014


Viktor Dukhovni <cryptography at dukhovni.org> writes:

>In Postfix, Wietse has created a project-specific style (sub-culture) of C
>programming, which has been used consistently as the project evolved, over
>the past 17 years.  This sub-culture emphasizes safety, comprehensive
>documentation, and code written for readability.

It also includes a policy of constant audit (which I also do in my code),
which is a necessary addition to the above.  This yields a more realistic
rendition of ESR's dictum, "at least one pair of eyes that's actively looking
makes bugs shallow".

Peter.


More information about the cryptography mailing list