Re: [Lit.] Buffer overruns

From: David Wagner (daw_at_taverner.cs.berkeley.edu)
Date: 01/22/05 

Date: Sat, 22 Jan 2005 22:44:01 +0000 (UTC)

Trevor L. Jackson, III wrote:
>The above assumes that reduction of incidence is orthogonal to the
>redution of consequences. That assumption is false.

It is? How so?

Automated bounds checking reduces consequences (it turns a "run amok"
total system compromise into a denial of service), but I think Doug Gwyn
is correct to say that it probably doesn't reduce incidence significantly
(certainly not enough).

Loading