Ask HN: Would any code analysis tools have caught have caught heartbleed?

1 pointsmacarthy1212y ago3 comments

If not, why not? Is this kind of issue something that a language feature could avoid?

3 comments

3 comments · 2 top-level

pascal_cuoq12y ago· 1 in thread

See http://blog.regehr.org/archives/1125 (Heartbleed and Static Analysis)

Looks like the FLOSS community needs to start exploring these kind of tools.

This blog post demonstrates how OpenSSL's unsafe C code can be migrated to a safe programming language called ATS (Applied Type System):

j / k navigate · click thread line to collapse