Re: Cyclone: A Safe Dialect of C
From: Ben Laurie (ben@algroup.co.uk)Date: 05/25/02
- Previous message: aleph1@securityfocus.com: "Cyclone: A Safe Dialect of C"
- In reply to: aleph1@securityfocus.com: "Cyclone: A Safe Dialect of C"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 24 May 2002 23:03:35 +0100 From: Ben Laurie <ben@algroup.co.uk> To: aleph1@securityfocus.com
aleph1@securityfocus.com wrote:
> Cyclone: A Safe Dialect of C
> Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney,
> and Yanling Wang. USENIX Annual Technical Conference, Monterey, CA, June 2002.
>
> Cyclone is a safe dialect of C. It has been designed
> from the ground up to prevent the buffer overflows,
> format string attacks, and memory management errors
> that are common in C programs, while retaining
> C's syntax and semantics. This paper examines
> safety violations enabled by C's design, and shows
> how Cyclone avoids them, without giving up C's
> hallmark control over low-level details such as data
> representation and memory management.
>
> http://www.research.att.com/projects/cyclone/papers/cyclone-safety.ps
> http://www.research.att.com/projects/cyclone/papers/cyclone-safety.pdf
> http://www.research.att.com/projects/cyclone/papers/cyclone-safety.dvi
It may (or may not) be worth mentioning that, as an exercise, I ported
some OpenSSL code to Cyclone. It was surprisingly easy, and the value of
doing it is clear.
I like it.
Cheers,
Ben.
-- http://www.apache-ssl.org/ben.html http://www.thebunker.net/"There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit." - Robert Woodruff
- Previous message: aleph1@securityfocus.com: "Cyclone: A Safe Dialect of C"
- In reply to: aleph1@securityfocus.com: "Cyclone: A Safe Dialect of C"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|