{"id":106445,"date":"2023-01-22T12:48:15","date_gmt":"2023-01-22T10:48:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=106445"},"modified":"2023-01-24T13:53:19","modified_gmt":"2023-01-24T11:53:19","slug":"sozdatel-c-raskritikoval-navyazyvanie-bezopasnyh-yazykov-programmirovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/sozdatel-c-raskritikoval-navyazyvanie-bezopasnyh-yazykov-programmirovaniya","title":{"rendered":"The creator of C++ criticized the imposition of safe programming languages","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Bjarne Stroustrup, creator of the C++ language, published objections to the conclusions made in the NSA report, which recommended organizations to move away from programming languages like C and C++, which place memory management on the developer, in favor of languages such as C#, Go, Java, Ruby, Rust, and Swift that provide automatic memory management or perform safe memory checks at compile time. <\/p>\n
In Stroustrup's opinion, the safe languages mentioned in the NSA report do not actually surpass C++ in important applications from his perspective. In particular, the core guidelines for using C++ developed in recent years (C++ Core Guidelines) cover methods of safe programming and prescribe the use of tools that guarantee safe handling of types and resources. At the same time, developers who do not require such strict safety guarantees are allowed to continue using older development methods. <\/p>\n
Stroustrup believes that a good static analyzer that conforms to C++ Core Guidelines can provide the necessary safety guarantees for C++ code, requiring significantly less effort than switching to new safe programming languages. For example, most of the Core Guidelines recommendations are already implemented in the static analyzer and memory safety profile included in Microsoft Visual Studio. Some of the recommendations are also considered in the Clang tidy static analyzer. <\/p>\n
The NSA report's focus solely on memory management issues was also criticized, as it overlooked many other programming language problems that affect safety and reliability. Stroustrup views safety as a broader concept, with various aspects achieved through a combination of coding style, libraries, and static analyzers. To manage the inclusion of rules that ensure safety in handling types and resources, it is proposed to use annotations in the code and compiler options. <\/p>\n
\u00cen aplica\u021biile \u00een care performan\u021ba este mai important\u0103 dec\u00e2t securitatea, o astfel de abordare ofer\u0103 posibilitatea de a aplica selectiv m\u0103suri care garanteaz\u0103 securitatea doar acolo unde este necesar. Instrumentele de \u00eembun\u0103t\u0103\u021bire a securit\u0103\u021bii pot fi de asemenea aplicate par\u021bial, de exemplu, la \u00eenceput s\u0103 ne limit\u0103m la reguli de verificare a intervalelor \u0219i ini\u021bializ\u0103rii, iar apoi s\u0103 adapt\u0103m treptat codul pentru cerin\u021be mai stricte. \n Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"