-memory-safe C++ - Jim Radigan - CppCon 2022

Поделиться
HTML-код
  • Опубликовано: 23 ноя 2024

Комментарии • 27

  • @bunpasi
    @bunpasi Год назад +3

    I wish compilers would come with more of these features out of the box. I'd imagine that at least some static analyses features are relatively easy to implement. This could already be a big help.

    • @tdoc666___
      @tdoc666___ 9 месяцев назад

      you can't have improvement without continuos challenges, we need challenges to improve, what you said is not actually the best way to get better and smarter, what's the point to live a life if not to experience and improve your own mindset...

  • @simonfarre4907
    @simonfarre4907 Год назад +10

    Really should rename "Data Oriented Programming" as it can be confused with "Data oriented design" or its less used synonym "Data oriented programming" (which name matches exactly).
    Data oriented programming/design is a superior idea over Object oriented programming - yes, the video is about a completely different subject, but naming is important.

  • @gast128
    @gast128 28 дней назад

    Good to have extra checking capabilities but not sure what this adds to MS debug CRT. That already reports many of presented stuff such as boundary overruns and memory leaks. Using modern C++ would already prevent many of the issues.

  • @sideparting6845
    @sideparting6845 Год назад

    SAL was useful in a codebase I worked on years ago but it was so so so poorly documented!
    Fascinating talk, thanks.

  • @leyasep5919
    @leyasep5919 Год назад +18

    40 years ago, some dudes creates Ada...

  • @DrGreenGiant
    @DrGreenGiant Год назад +1

    Interesting talk of some fantastic technology.
    Was somewhat put off by the parts that very much come across as a sales pitch though.

  • @paulfloyd9258
    @paulfloyd9258 Год назад

    Valgrind dev (d)hat on, very interesting. Continuation sounds good. Is there no way to hook the loader so that asan is active during program load?

  • @JJCUBER
    @JJCUBER Год назад +1

    At 46:24 , does it make the A[-1] write to what would have been there if the metadata wasn’t (in the process of “taking the hit”)?

  • @zxuiji
    @zxuiji Год назад

    9:22, if you can build it into the IDE then you can add it to all compilers you can submit code for, no excuses, it should be made a compile time error, also should add a option to toggle checking for values that have not been 0'd out by the function exit, if there's no sign they're being passed to something outside of the function's scope then they should be cleared by the time it ends, even if it's not compiled into the final byte code, this type of requirement will at least remind the dev that the variable exists and they should make sure it is safely cleaned up. In my case I make liberal use of goto to ensure safe cleanup, here's an example:
    int foo(...)
    {
    int ret = -1; // Default to an unknown error
    void *mem = calloc( 1, BUFSIZ ); /* Compiler should assume this succeeds and use a non-0 number to track when it's cleaned up, an instance of mem = NULL; should be found shortly before return */
    ...
    if ( /* catch error */ )
    goto free_pointer;
    ...
    ret = 0;
    free_pointer:
    free(mem);
    mem = NULL;
    return ret;
    }

  • @zxuiji
    @zxuiji Год назад

    42:29, a simpler solution is to just store the thread id in the lock, start it off as -1 (or 0 if that's always invalid) and when a lock is obtained set that id and increment a reference count, every lock attempt there after from that would then increase that count and the same number of releases would then be required to clear the the thread id let another thread take the lock, it's the solution I came up with for my custom mutex that utilises a system mutex under the hood for the initial lock, 1st thread to acquire the lock, set the thread id and release the lock takes the custom mutex, the other thread/s upon acquiring the lock will check again if the thread id is still empty and return to waiting on it if not.

    • @Ch40zz
      @Ch40zz Год назад +1

      Thats called a reentrant/recursive lock, it already exists :)

    • @kuhluhOG
      @kuhluhOG Год назад

      @@Ch40zz yep, called std::recursive_mutex and std::recursive_timed_mutex in case you need one with time limits

  • @leyasep5919
    @leyasep5919 Год назад +3

    Watching this scares me as hell because I know too much what this means, and it's so ugly !

  • @dexterman6361
    @dexterman6361 Год назад +2

    Funny they run it on GCC to show memory errors, but not on MSVC or any other MS tech (apart from vague IoT) itself. Sadge. Goes to show they are ready to poo poo on other projects but not their own. MS has always been this way
    Good video though! Really interesting tech!

    • @deletevil
      @deletevil 7 месяцев назад

      :D I think you mistook that specific moment in a wrong manner. He did tell that those errors came from an old GCC compiler version and newer one didn't have any of those memory errors.

  • @ordinarygg
    @ordinarygg Год назад +3

    Wait till Rust comment arrives xDDD

    • @sideparting6845
      @sideparting6845 Год назад

      Yes particularly after his comment at 1:00:40!!!

    • @svenvandevelde1
      @svenvandevelde1 Год назад

      Seems to me you have not understood the content of what has been explained. Rust won't help.

  • @zxuiji
    @zxuiji Год назад

    48:31, you can, change the font size, I don't even use windows anymore and I still remember that

  • @CuriousCauliflowerX
    @CuriousCauliflowerX Год назад +8

    Dynamic analysis is an improvement but it's not sufficient, for dynamic analysis to work you'd need to be able to run all of the code paths ahead of time, which is rare. The way forward is to actually ship the analysis to prod, and at that point you might as well use a better language.

    • @krumbergify
      @krumbergify Год назад +7

      If you don’t run your code before shipping. How do you know if it even works?

    • @LeDabe
      @LeDabe Год назад +8

      that is why you use fuzzing to try to hit all code paths. Though it is obviously not thorough.

    • @azarashikamen4098
      @azarashikamen4098 Год назад +1

      Bullshit...
      Dynamic analysis is a must. Most applications depends on runtime decisions.
      Shipping application with tools for dynamic analysis is good, but language doesn't matter here.

    • @JorgetePanete
      @JorgetePanete Год назад +1

      ​@@azarashikamen4098 "Bullshit..." If the code is detected as faulty just don't let it compile, and you need specific features to do that

  • @manrico736
    @manrico736 8 месяцев назад

    rust is coming....

    • @msx94
      @msx94 21 день назад

      @@manrico736 if C++ get the same ownership rules and compiler rules C++ will replace rust