From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,bc1361a952ec75ca X-Google-Attributes: gid103376,public X-Google-Thread: 1014db,582dff0b3f065a52 X-Google-Attributes: gid1014db,public X-Google-Thread: 109fba,582dff0b3f065a52 X-Google-Attributes: gid109fba,public X-Google-ArrivalTime: 2001-08-07 01:10:22 PST Path: archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news.isc.org!agilent.com!sdd.hp.com!usc.edu!howland.erols.net!netnews.com!feed2.onemain.com!feed1.onemain.com!cyclone-sf.pbi.net!165.113.238.17!pln-w!spln!dex!extra.newsguy.com!newsp.newsguy.com!elf.eng.BSDI.COM!not-for-mail From: Chris Torek Newsgroups: comp.lang.ada,comp.lang.c,comp.lang.c++ Subject: Re: How Ada could have prevented the Red Code distributed denial of service attack. Date: 7 Aug 2001 00:09:04 -0700 Organization: None of The Above Sender: torek@bsdi.com Message-ID: <9ko46g$a0f$1@elf.eng.bsdi.com> References: <3c30da40.0108060848.796d9bd9@posting.google.com> <3B6F3216.F410BBFF@home.com> NNTP-Posting-Host: p-178.newsdawg.com Xref: archiver1.google.com comp.lang.ada:11464 comp.lang.c:72629 comp.lang.c++:80587 Date: 2001-08-07T00:09:04-07:00 List-Id: In article <3B6F3216.F410BBFF@home.com> Warren W. Gay VE3WWG writes: >Not only that, C/C++ _cannot_ provide [array bounds] checks. We have proof by counterexample that C compilers *can* do this, because Bounds-Checking GCC exists. (It is not the only one that does it, but it is an easy way to demonstrate it.) It *is* true that typical C compilers do not even attempt to check array subscripts, but this is implementation, not specification. (Ada programmers, at least, ought to know the difference. :-) ) -- In-Real-Life: Chris Torek, Wind River Systems (BSD engineering) El Cerrito, CA, USA Domain: torek@bsdi.com +1 510 234 3167 http://claw.eng.bsdi.com/torek/ (not always up) I report spam to abuse@.