@cjd @PhenomX6 @BrodieOnLinux @charliebrownau @ryo @fluffy @yes are a static analyser and valgrind not part of your c toolchain? and is RCE literally the only vuln you're addressing with this thought experiment? because resource abuse, DoS, falsely returned data, and covert channels are just as serious and, in the business world, it costs just as much money to recover from downtime and data exploitation