Comment

Comment by afdbcreid

Both only attach provenance to allocations. The common example is:

    struct User {
        char name[100];
        bool is_admin;
    };
Where a buffer overflow can still overwrite `is_admin`.

Both also require recompilation of everything, which might be possible for CHERI but not for Fil-C - which is why, for example, there cannot be Fil-C support for Windows or macOS.

parent afdbcreid 1 month ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton