From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 Path: border1.nntp.dca1.giganews.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!feeder.erje.net!eu.feeder.erje.net!news.albasani.net!eternal-september.org!feeder.eternal-september.org!mx02.eternal-september.org!.POSTED!not-for-mail From: "G.B." Newsgroups: comp.lang.ada Subject: Re: Languages don't matter. A mathematical refutation Date: Thu, 02 Apr 2015 19:17:02 +0200 Organization: A noiseless patient Spider Message-ID: References: <59ac455c-72f6-43e2-8a79-efc0f3e16d9a@googlegroups.com> <19qfgu5pjszm5.s5y5u8r0zx8k.dlg@40tude.net> <161a69af-a392-4214-bd92-0e20e7522cca@googlegroups.com> <1ht5q4lxmtf3p.mntbczbpti5n.dlg@40tude.net> <0ac76a41-d276-47d4-8659-530229802d12@googlegroups.com> <1ieaan02ff638.n6kjnn72tsp3$.dlg@40tude.net> <1o9qidr7413f4$.1jbc41w6r9j62.dlg@40tude.net> <1q1hq0qt8n15$.kxfdpvio0p1w.dlg@40tude.net> Reply-To: nonlegitur@futureapps.de Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Thu, 2 Apr 2015 17:16:06 +0000 (UTC) Injection-Info: mx02.eternal-september.org; posting-host="b96887e80893c84a90c3007226ca0d1c"; logging-data="18327"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18HF/7zO31WNFTk5cuRdOYT4XFCHB6D2Nc=" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 In-Reply-To: <1q1hq0qt8n15$.kxfdpvio0p1w.dlg@40tude.net> Cancel-Lock: sha1:vwTUQp+8rRd8nedJ7XT1is70aRI= Xref: number.nntp.giganews.com comp.lang.ada:192690 Date: 2015-04-02T19:17:02+02:00 List-Id: On 02.04.15 15:35, Dmitry A. Kazakov wrote: > You change the language, you get*other* errors, no > statistics across to compare. No doubt there is some overlap in expressive means of C and Ada. Then, after a close look at CVEs, one might consider testing a prediction that says: There will be fewer CVEs once int overflows are detected! Take a C library, write it in C-Ada, i.e. not in idiomatic Ada, and make sure your compiler does not by default turn off Ada.(*) Then see when happens when throwing data at the result. Does the number of vulnerabilities due to int overflows decrease? __ (*) Do not run GNAT with default switches.