points by 0xbadc0de5 23 hours ago | 0 comments
Except *sshole isn't a memory safety vulnerability - it's a logic bug. And logic bugs happen in every programming language.
[–] Techcable 5 hours ago
It is idiomatic C to use in-band sentinel values (NULL is the most prominent example). It is very much not idiomatic rust.
> This is not a memory safety vulnerability; rather, it is one of those issues that, people often say, languages with better type systems won’t save you from. This is true! You can very well write a Rust function that returns "" if the password is too long. But the big difference between C and Rust in this regard is that the norms of the Rust community do not allow that.*