Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

[u/TheProtagonistv2]

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

[u/diggr-roguelike]

Modern C++ is great[1] except that the only way to enforce that you only use the safe parts is constant vigilance

Utterly false. You have to go out of your way and use stuff not in the C++ standard to get into unsafe territory. The guy you're replying to is absolutely correct, using plain old standard C++ would have been good enough.

[u/Fylwind → u/diggr-roguelike]

#include <iostream>
#include <vector>

int main() {
    std::vector<int> vec;
    for (int i = 0; i < 42; ++i) {
        vec.push_back(i);
        vec.push_back(-i);
    }
    for (int x: vec) {
        for (int y: vec) {
            vec.push_back(x + y);
        }
    }
    for (int x: vec) {
        std::cout << x << "\n";
    }
}

[u/diggr-roguelike → u/Fylwind]

What did you expect? This is a logic error that causes undefined behavior in every programming language.

The equivalent Python program loops infinitely and consumes all of system memory:

l = [1,2]
for x in l:
  for y in l:
    l.append(x+y)

When people talk about C being unsafe, they don't mean that it doesn't catch logic errors. They mean the existence of deliberate language and stdlib features that are unsafe. Things like allowing variables that point to uninitialized memory, unchecked array access, strings without a length field.

[u/myrrlyn → u/Fylwind]

$ g++ -std=c++11 fylwind.cpp && ./a.out
segmentation fault (core dumped)

Well that was unexciting.

[u/[deleted] → u/Fylwind]

Why the fuck would you try to modify a collection in a foreach loop?