stronglink
stronglink copied to clipboard
Integer overflow checks
We already use calloc
and reallocarray
. We should also start using compiler intrinsics (or substitutes where unavailable) for safe integer operations.
https://news.ycombinator.com/item?id=10497164 http://lkml.iu.edu/hypermail/linux/kernel/1510.3/02866.html
Gotta be careful. It's very easy to make things gratuitously complex without really improving security.