Posts by rwessman 5 publicly visible posts • joined 4 Mar 2019
My company has (literally) millions of lines of C/C++. Conversion would take years and introduce so much instability that it would be impractical.
Instead, we’ve invested in memory checking tools. It’s not perfect, but it’s better that turning the code base upside down.
That trick never works. Years ago at a former company, there was a disk maintenance tool with the potential to be very destructive if used incorrectly. In fact, it would issue a "Are you sure? (y/n)" prompt twice.
To which customers wrote wrappers like:
dpmaint << END
y
y
END
strcpy insecurely for login authentication? Makes you go AAAAA-AAAAAAArrg *segfault*
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
