Integer overflow checks

btrask / stronglink

A searchable, syncable, content-addressable notetaking system

Other

1.04k stars 45 forks source link

Integer overflow checks #75

Open btrask opened 8 years ago

btrask commented 8 years ago

We already use calloc and reallocarray. We should also start using compiler intrinsics (or substitutes where unavailable) for safe integer operations.

btrask commented 8 years ago

https://news.ycombinator.com/item?id=10497164 http://lkml.iu.edu/hypermail/linux/kernel/1510.3/02866.html

Gotta be careful. It's very easy to make things gratuitously complex without really improving security.