vulnerabilities

[wijhierbeneden]

Hello

I want to make a list of all the vulnerabilities in C/C++.
I am aware of bufferoverflow/heapoverflow/race conditions/format string bugs/
Off-by-one/ numeric under- and overflow/ unsigned-signed mismatch

Are there other vulnerabilities in c/c++??

thx

[Mike Wahler]

Re: vulnerabilities

"wijhierbeneden " <wijhierbeneden @hotmail.com> wrote in message
news:236f4e4.04 10211231.dc9e49 3@posting.googl e.com...[color=blue]
> Hello
>
> I want to make a list of all the vulnerabilities in C/C++.[/color]

There are no vulnerabilities at all in a nonexistent language.
[color=blue]
> I am aware of bufferoverflow/heapoverflow/race conditions/format string[/color]
bugs/[color=blue]
> Off-by-one/ numeric under- and overflow/ unsigned-signed mismatch
>
> Are there other vulnerabilities in c/c++??[/color]

The largest vulnerability of C++ (the only language which is topical
here), or any other language, is the fact that it is accessible to humans.

-Mike

[JKop]

Re: vulnerabilities

Mike Wahler posted:
[color=blue]
> "wijhierbeneden " <wijhierbeneden @hotmail.com> wrote in message
> news:236f4e4.04 10211231.dc9e49 3@posting.googl e.com...[color=green]
>> Hello
>>
>> I want to make a list of all the vulnerabilities in C/C++.[/color]
>
> There are no vulnerabilities at all in a nonexistent language.
>[color=green]
>> I am aware of bufferoverflow/heapoverflow/race conditions/format
>> string bugs/ Off-by-one/ numeric under- and overflow/ unsigned-signed
>> mismatch
>>
>> Are there other vulnerabilities in c/c++??[/color]
>
> The largest vulnerability of C++ (the only language which is topical
> here), or any other language, is the fact that it is accessible to
> humans.
>
> -Mike[/color]


"Vulnerabilitie s".

Some-one needs a Thesaurus! Sure, there's things one must be particular
about, but these are in no way vulnerabilities ! Intricacies maybe?

C is off-topic here.

"C/C++" is just asking for trouble. I drove my car/boat to work today.


-JKop

[Rolf Magnus]

Re: vulnerabilities

JKop wrote:
[color=blue]
> "Vulnerabilitie s".
>
> Some-one needs a Thesaurus! Sure, there's things one must be particular
> about, but these are in no way vulnerabilities ! Intricacies maybe?
>
> C is off-topic here.
>
> "C/C++" is just asking for trouble. I drove my car/boat to work today.[/color]

You have an amphibian vehicle?

*scnr*

[Ioannis Vranos]

Re: vulnerabilities

Rolf Magnus wrote:
[color=blue][color=green]
>>"C/C++" is just asking for trouble. I drove my car/boat to work today.[/color]
>
>
> You have an amphibian vehicle?
>
> *scnr*[/color]


Good one. :-)



--
Ioannis Vranos

http://www23.brinkster.com/noicys

[Christopher Benson-Manica]

Re: vulnerabilities

Mike Wahler <mkwahler@mkwah ler.net> spoke thus:
[color=blue]
> The largest vulnerability of C++ (the only language which is topical
> here), or any other language, is the fact that it is accessible to humans.[/color]

How about that they're created by humans? Combine the two, and
disaster is sure to ensue...

--
Christopher Benson-Manica | I *should* know what I'm talking about - if I
ataru(at)cybers pace.org | don't, I need to know. Flames welcome.