On: Heap-based buffer overflow in Sudo

[cheph]

For some code you should be able to do this, and if you can't then I don't think you should be writing code.

Coding is not brute forcing. I feel like this is taking an extreme position at the complete opposite end from not testing anything.

EDIT: Misread the comment I replied to. I agree that it is not likely that anyone can tell the correctness of all code from merely looking at it.

[kaba0 → cheph]

For some code, yes. What about a complete refactor of the core functionality of said program, with parallelism and the like?

[cheph → kaba0]

I misread the comment I think, but either way, I am not arguing against automated tests, I was just trying to point out that for some fragments of a code base you should absolutely be able to tell correctness by looking at it.