[Info-vax] VAX Macro to C conversion

Bill Gunshannon bill.gunshannon at gmail.com
Wed Jul 10 10:52:45 EDT 2019


On 7/10/19 10:50 AM, Bill Gunshannon wrote:
> On 7/10/19 10:06 AM, Scott Dorsey wrote:
>> Bill Gunshannon  <bill.gunshannon at gmail.com> wrote:
>>>
>>>> * no string type
>>>
>>> So what?  What's so great about a string type?  Fortran
>>> didn't have it until 77.  Pascal didn't have it until UCSD.
>>
>> Some of Arne's complaints about C are kind of silly, but this is a really
>> huge one.
>>
>> If you look at CERT advisories regarding security vulnerabilities in the
>> past few decades, you will see that the vast majority of them are the 
>> direct
>> consequence of poor management of null-terminated strings.
>>
>> I know, the null-terminated string thing seemed like a good idea, and 
>> easy
>> to graft onto C, but in the end it has been a terrible, terrible plan and
>> has cost us greatly.
> 
> 1.  Null Terminated Strings are not unique to C.
> 2.  The competent programmer knows all of this in the first place
>      and should write his programs accordingly.  Just because the
>      language doesn't range check automatically (COBOL doesn't
>      either, probably for the same reason) doesn't mean the
>      programmer can't  or shouldn't.
> 
> Read  my lips.  It's not the language.

I should also have mentioned that while Pascal did have range
checking UCSD Pascal added the ability to turn it off.  And I
have worked on programs where this was required to get the job
done.

bill




More information about the Info-vax mailing list