Secure Coding mailing list archives

Disable Bounds Checking?


From: mrockman at acm.org (Mark Rockman)
Date: Sat, 03 Nov 2007 01:08:52 -0400

Back around 1980, when Ada was new, it was common for compiler manufacturers to claim it is best to disable bound 
checking for performance reasons.  Getting your program to run slightly faster trumped knowing that any of your buffers 
was overflowing. Code that silently trashes memory can be expected to produce some truly creative results.   My 
practice is to code defensively, to ensure my program is operating according to policies that I set for it.  I want to 
know when it is misbehaving.  Should there be a performance hit, I instrument the program to find the hot spots and 
optimize those and only those.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://krvw.com/pipermail/sc-l/attachments/20071103/83402060/attachment.html 


Current thread: