5 ms·
When Chromium and V8 are written in a memory-safe language then I might believe this. Yes, if your JavaScript engine is written in C++, it’s going to be very h
by odyssey7 12d ago
When Chromium and V8 are written in a memory-safe language then I might believe this.
Yes, if your JavaScript engine is written in C++, it’s going to be very hard to avoid very gross bugs. We have better options now.
The ability of adversaries to find and exploit very gross bugs in C++ codebases should have already compelled the industry to move to memory safety. Now that AI has democratized the ability to scour C++ codebases for really gross and exploitable bugs, I should think that our hands are at last being forced. I’m not impressed by what I’ve seen in the industry with respect to taking memory safety seriously.
- rvz 11d agoExactly this. This is a never ending problem with C/C++ and it's these same memory corruption CVEs appearing all the time. I also cringe at projects that "compile C to WASM" and then believe that it is immediately "memory-safe". (It really is not.) The only exception for C/C++ projects is Fil-C which that is memory-safe. New projects at this point should just consider using Rust instead.
- tsoukase 10d agoI believe programmers still write in C(++) after memory safe options, in order to continue being occupied afterwards, fixing the bugs that will arise. Without criminals, police is obsolete.
- account42 10d agoA JIT by definition bypasses the safety mechanisms of whatever language you write it in. Think before you post.