On: The Linux Kernel Is Now VLA (Variable-Length Array) Free

[pjmlp]

What about lack of bounds checking leaving the door open to security exploits, in the days where CVEs caused by C's use increase every month?!?

Hence why they were dropped in C11. Being an optional annex means that actually most C vendors won't bother.

[viraptor → pjmlp]

Why is that different from heap allocations? They don't have automatic bounds checking either.

[pjmlp → viraptor]

Malloc does not corrupt the heap if it cannot accommodate the requested block size.