If you really must write new C, use Clang with -Weverything -fsanitize=undefined from the start. Turn off the few non-applicable warnings.
-
-
@RichFelker@CopperheadSec It would be better if the non-abort-immediately-mode was default, and the unsafe sanitizer libraries were opt in -
@RichFelker@CopperheadSec Harder to recommend when “Use -fsanitizer=undefined, but make sure to -fsanitizer-undefined-trap-on-error” -
@sortiecat@RichFelker It's a debugging feature first and a hardening feature second though. Only a subset is truly useful for hardening. -
@sortiecat@RichFelker Other sanitizers don't have a production mode at all and UBSan is focused on accurate debugging rather than speed. -
@sortiecat@RichFelker It would be possible to offer better performance by using lazy rather than strict checks. Trigger on use of results. - 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.