On: More Memory Safety for Let's Encrypt: Deploying nt...

[dheera]

So we need a new flag for gcc that writes zeros to any block of allocated memory before malloc returns, not a new language.

[KMag → dheera]

You'd probably want an alternative libc implementation rather than a compiler flag.

However, calloc everywhere won't save you from smashing the stack or pointer type confusion (a common source of JavaScript exploits). Very rarely is leftover data from freed memory the source of an exploit.

[BlobberSnobber → dheera]

If only the very competent people that decided to create Rust had thought of asking you for the solution instead...

Have a little humility.

[kelnos → dheera]

That wouldn't make it safe. It would just make it crash in a different way, and still be vulnerable to exploitation by an attacker.

[saagarjha → dheera]

We have that already. There are still other problems that exist.