On: The Linux Kernel Is Now VLA (Variable-Length Array) Free

[krzyk]

Why? It has quite nice simple syntax. And all C newbies love it (doing malloc and then free is cumbersome, and not needed in simple cases).

[pjmlp → krzyk]

What about lack of bounds checking leaving the door open to security exploits, in the days where CVEs caused by C's use increase every month?!?

Hence why they were dropped in C11. Being an optional annex means that actually most C vendors won't bother.

[viraptor → pjmlp]

Why is that different from heap allocations? They don't have automatic bounds checking either.

[pjmlp → viraptor]

Malloc does not corrupt the heap if it cannot accommodate the requested block size.