logoalt Hacker News

layer8yesterday at 8:24 AM2 repliesview on HN

That’s true in other languages as well. Any programmatic task can end up being an exploit vector.


Replies

pjc50yesterday at 8:52 AM

No? That's the whole point of formal verification?

You can even kind of retrofit this to C. The classic example is "sel4". You just need a set of proofs that the code doesn't trigger UB. This ends up being much larger and more complicated than the C itself.

show 1 reply
Ygg2yesterday at 3:11 PM

Yeah, but only in C* can those errors end up as more UB.

* terms and limits may apply.