Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think the lesson here is to stop using signed integer as an index into an array.


The lesson is to only use C when absolutely necessary, and regularly use all the sanitizers and other safety tools you can find. Not just when you suspect something fishy.


The lesson is you shouldn't use standard C, until the standard is fixed. Until then, compile with -fno-strict-overflow, like I do.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: