Embed Notice

@chrisamaphone @airspeedswift
Yes, in C/C++, which still accounts for a •substantial• portion of new code written, and of code in production, and of critical vulnerabilities.

The C++ world in particular has been in turmoil in recent years over the battle between “just don’t write bugs” vs “mitigate with better tooling” vs “C/C++ are the cigarettes of p-langs.” This in particularly set the cat amongst the pigeons:

https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI_SOFTWARE_MEMORY_SAFETY.PDF