Re: Thoughts on Shellshock and beyond

["David A. Wheeler" <dwheeler () dwheeler com>]

> Buffer reuse is common in languages with memory safety (so that I/O 
throughput is not bounded by garbage collector throughput).  The impact 
is reduced (you only leak prior buffer contents, whatever that might be, 
not anything which happens to be in the vicinity on the heap).  But I 
don't think it's true that memory safety prevents such information leaks

Heartbleed definitely would have been countered by memory-safe languages.  NIST even demonstrated that address 
sanitizer countered it, which is direct experimental proof.  More info at http://www.dwheeler.com/essays/heartbleed.html



--- David A.Wheeler