On Wed, Jan 13, 2016 at 12:53 AM, Ehsan Akhgari <ehsan.akhg...@gmail.com> wrote:
> I'll investigate integrating gsl-lite into m-c.

Thank you.

On Mon, Jan 11, 2016 at 10:03 PM, Brian Smith <br...@briansmith.org> wrote:
> mozilla::pkix::Input/Reader will never throw an exception or abort the
> process; instead it always returns an explicit success/failure result. It
> seems GSL will either abort or throw an exception in many situations. Since
> aborting is terrible and exceptions are not allowed in Gecko code, it seems
> Input/Reader is safer.

For uses where bound checks are merely a seat belt to avoid remote
code execution or memory disclosure vulnerabilities in case of a
programming error, aborting the process in probably better than asking
the caller to have error handling code that hopefully never runs.

(Out-of-bounds access of slices on the Rust side of FFI panics anyway.)

-- 
Henri Sivonen
hsivo...@hsivonen.fi
https://hsivonen.fi/
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to