-memory-safe C++ - Jim Radigan - CppCon 2022

Поділитися
Вставка
  • Опубліковано 22 лис 2024

КОМЕНТАРІ • 27

  • @bunpasi
    @bunpasi Рік тому +3

    I wish compilers would come with more of these features out of the box. I'd imagine that at least some static analyses features are relatively easy to implement. This could already be a big help.

    • @tdoc666___
      @tdoc666___ 9 місяців тому

      you can't have improvement without continuos challenges, we need challenges to improve, what you said is not actually the best way to get better and smarter, what's the point to live a life if not to experience and improve your own mindset...

  • @simonfarre4907
    @simonfarre4907 Рік тому +10

    Really should rename "Data Oriented Programming" as it can be confused with "Data oriented design" or its less used synonym "Data oriented programming" (which name matches exactly).
    Data oriented programming/design is a superior idea over Object oriented programming - yes, the video is about a completely different subject, but naming is important.

  • @sideparting6845
    @sideparting6845 Рік тому

    SAL was useful in a codebase I worked on years ago but it was so so so poorly documented!
    Fascinating talk, thanks.

  • @DrGreenGiant
    @DrGreenGiant Рік тому +1

    Interesting talk of some fantastic technology.
    Was somewhat put off by the parts that very much come across as a sales pitch though.

  • @leyasep5919
    @leyasep5919 Рік тому +18

    40 years ago, some dudes creates Ada...

  • @gast128
    @gast128 26 днів тому

    Good to have extra checking capabilities but not sure what this adds to MS debug CRT. That already reports many of presented stuff such as boundary overruns and memory leaks. Using modern C++ would already prevent many of the issues.

  • @paulfloyd9258
    @paulfloyd9258 Рік тому

    Valgrind dev (d)hat on, very interesting. Continuation sounds good. Is there no way to hook the loader so that asan is active during program load?

  • @JJCUBER
    @JJCUBER Рік тому +1

    At 46:24 , does it make the A[-1] write to what would have been there if the metadata wasn’t (in the process of “taking the hit”)?

  • @zxuiji
    @zxuiji Рік тому

    42:29, a simpler solution is to just store the thread id in the lock, start it off as -1 (or 0 if that's always invalid) and when a lock is obtained set that id and increment a reference count, every lock attempt there after from that would then increase that count and the same number of releases would then be required to clear the the thread id let another thread take the lock, it's the solution I came up with for my custom mutex that utilises a system mutex under the hood for the initial lock, 1st thread to acquire the lock, set the thread id and release the lock takes the custom mutex, the other thread/s upon acquiring the lock will check again if the thread id is still empty and return to waiting on it if not.

    • @Ch40zz
      @Ch40zz Рік тому +1

      Thats called a reentrant/recursive lock, it already exists :)

    • @kuhluhOG
      @kuhluhOG Рік тому

      @@Ch40zz yep, called std::recursive_mutex and std::recursive_timed_mutex in case you need one with time limits

  • @leyasep5919
    @leyasep5919 Рік тому +3

    Watching this scares me as hell because I know too much what this means, and it's so ugly !

  • @ordinarygg
    @ordinarygg Рік тому +3

    Wait till Rust comment arrives xDDD

    • @sideparting6845
      @sideparting6845 Рік тому

      Yes particularly after his comment at 1:00:40!!!

    • @svenvandevelde1
      @svenvandevelde1 Рік тому

      Seems to me you have not understood the content of what has been explained. Rust won't help.

  • @zxuiji
    @zxuiji Рік тому

    9:22, if you can build it into the IDE then you can add it to all compilers you can submit code for, no excuses, it should be made a compile time error, also should add a option to toggle checking for values that have not been 0'd out by the function exit, if there's no sign they're being passed to something outside of the function's scope then they should be cleared by the time it ends, even if it's not compiled into the final byte code, this type of requirement will at least remind the dev that the variable exists and they should make sure it is safely cleaned up. In my case I make liberal use of goto to ensure safe cleanup, here's an example:
    int foo(...)
    {
    int ret = -1; // Default to an unknown error
    void *mem = calloc( 1, BUFSIZ ); /* Compiler should assume this succeeds and use a non-0 number to track when it's cleaned up, an instance of mem = NULL; should be found shortly before return */
    ...
    if ( /* catch error */ )
    goto free_pointer;
    ...
    ret = 0;
    free_pointer:
    free(mem);
    mem = NULL;
    return ret;
    }

  • @zxuiji
    @zxuiji Рік тому

    48:31, you can, change the font size, I don't even use windows anymore and I still remember that

  • @dexterman6361
    @dexterman6361 Рік тому +2

    Funny they run it on GCC to show memory errors, but not on MSVC or any other MS tech (apart from vague IoT) itself. Sadge. Goes to show they are ready to poo poo on other projects but not their own. MS has always been this way
    Good video though! Really interesting tech!

    • @deletevil
      @deletevil 7 місяців тому

      :D I think you mistook that specific moment in a wrong manner. He did tell that those errors came from an old GCC compiler version and newer one didn't have any of those memory errors.

  • @manrico736
    @manrico736 8 місяців тому

    rust is coming....

    • @msx94
      @msx94 19 днів тому

      @@manrico736 if C++ get the same ownership rules and compiler rules C++ will replace rust

  • @CuriousCauliflowerX
    @CuriousCauliflowerX Рік тому +8

    Dynamic analysis is an improvement but it's not sufficient, for dynamic analysis to work you'd need to be able to run all of the code paths ahead of time, which is rare. The way forward is to actually ship the analysis to prod, and at that point you might as well use a better language.

    • @krumbergify
      @krumbergify Рік тому +7

      If you don’t run your code before shipping. How do you know if it even works?

    • @LeDabe
      @LeDabe Рік тому +8

      that is why you use fuzzing to try to hit all code paths. Though it is obviously not thorough.

    • @azarashikamen4098
      @azarashikamen4098 Рік тому +1

      Bullshit...
      Dynamic analysis is a must. Most applications depends on runtime decisions.
      Shipping application with tools for dynamic analysis is good, but language doesn't matter here.

    • @JorgetePanete
      @JorgetePanete Рік тому +1

      ​@@azarashikamen4098 "Bullshit..." If the code is detected as faulty just don't let it compile, and you need specific features to do that