April 2008 - Posts

More on Checking Allocations
Seems my last post met with some objections – somewhat rightfully so, as I mischaracterized one of Tom's points – he never advocated just not checking for allocations, but instead to use an allocator that has a non-returning error handler – though it Read More...
Posted 21 April 08 07:27 by david_leblanc | 1 Comments   
Filed under
Checking Allocations & Potential for Int Mayhem
Must be synchronicity. I started out the day with a really interesting mail from Chris Wysopal talking about how allocations can go wrong, fun with signed int math, and the new[] operator. Once I got done responding to Chris, I then notice Robert Hensing's Read More...
Posted 16 April 08 02:37 by david_leblanc | 1 Comments   
Filed under
More Checking for Pointer Math
Someone pointed out that it isn't sufficient to check for whether the pointer math wrapped, but that we also need to check that the resulting pointer is in our buffer. They then came to the possibly erroneous conclusion that really all you had to do was Read More...
Posted 08 April 08 06:13 by david_leblanc | 0 Comments   
Filed under
Evil Compiler Tricks, and Checking for Pointer Math
My favorite programming geek hobby being integer overflows, this caught my eye – "gcc silently discards some wraparound checks" http://www.kb.cert.org/vuls/id/162289 Basically, what it says is that code which looks like this: ============ snip ============== Read More...
Posted 04 April 08 02:39 by david_leblanc | 4 Comments   
Filed under

Search

This Blog

Syndication

Page view tracker