Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Submission + - Overeager Compilers Can Open Security Holes In Your Code (itworld.com)

jfruh writes: Creators of compilers are in an arms race to improve performance. But according to a presentantation at this week's annual USENIX conference, those performance boosts can undermine your code's security. For instance, a compiler might find a subroutine that checks a huge bound of memory beyond what's allocated to the program, decide it's an error, and eliminate it from the compiled machine code — even though it's a necessary defense against buffer overflow attacks.
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Overeager Compilers Can Open Security Holes In Your Code

Comments Filter:

One good reason why computers can do more work than people is that they never have to stop and answer the phone.