this post was submitted on 03 Jul 2024
46 points (80.3% liked)

Programmer Humor

19149 readers
1127 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS
 

A shitpost about languages that generate CVEs

you are viewing a single comment's thread
view the rest of the comments
[–] 0x0@programming.dev 10 points 2 months ago (2 children)

The "C is bad trope" is getting way too old. I'm surprised the author didn't plug Rust.

the only programming language in the world where these vulnerabilities regularly happen

Maybe because it's one of the most widely used languages in the world...

[–] BatmanAoD@programming.dev 28 points 2 months ago (1 children)

The trope will be "old" once the mainstream view is no longer that C-style memory management is "good enough".

That said, this particular vulnerability was primarily due to how signals work, which I understand to be kind of unavoidably terrible in any language.

[–] 5C5C5C@programming.dev 4 points 2 months ago (1 children)

A better language wouldn't have any need to use POSIX signals in this way.

[–] BatmanAoD@programming.dev 9 points 2 months ago

I'm not totally clear on why signals are used here in the first place. Arguably most C code doesn't "need" to use signals in complex ways, either.

[–] sukhmel@programming.dev 11 points 2 months ago (1 children)

Well, one of the most widely used that allows to do low-level stuff. The most widely used one is by far JavaScript but good luck making an OS or a device driver with it

[–] fuzzzerd@programming.dev 1 points 2 months ago (2 children)

I'm sure there are projects covering those areas written in JavaScript.

[–] OutsideNo1877@programming.dev 6 points 2 months ago

Just because you can doesn’t mean you should and i hope that is not a thing

[–] echindod@programming.dev 4 points 2 months ago (1 children)

Oh gawd. That would be so horrible! Is there a project o compile JavaScript to bytecode? With like LLVM? There must be, but I haven't heard of it. I shouldn't even say anything because I will be better off pretending it doesn't exist.

[–] calcopiritus@lemmy.world 1 points 2 months ago

Just bundle a JavaScript interpreter with the JavaScript code. No need to compile JavaScript.