[Cryptography] Fwd: Re: [FORGED] Ada vs Rust vs safer C

Stephan Neuhaus stephan.neuhaus at zhaw.ch
Tue Sep 27 06:35:19 EDT 2016


On 2016-09-17 04:29, Peter Gutmann wrote:
> Towards Optimization-Safe
> Systems: Analyzing the Impact of Undefined Behavior

One interesting thing about this paper is that the authors argue that
"unstable code exists in 40% of the 8,575 Debian Wheezy packages that
contain C/C++ code", but of course that might mean that the remaining
60% contain no security checks at all. (I can't bring myself to believe
that fully 60% of all C/C++-containing Wheezy packages contain only
checks that have defined behaviour.)

Fun,

Stephan


More information about the cryptography mailing list