[bitc-dev] nondeterminism and access control

Geoffrey Irving irving at naml.us
Sun Mar 15 17:35:27 EDT 2009


A thought that occurred to me after the discussion of array
initialization: allowing user access to uninitialized memory opens a
security hole.  It would become possible to read passwords or other
sensitive data out of the "uninitialized" memory, which would rule out
the use of BitC for intraprocess access control setups.  I think this
is more than enough to kill the idea of an uninitialized allocation
primitive.

Geoffrey


More information about the bitc-dev mailing list