Re: Cyclone: A Safe Dialect of C

From: Ben Laurie (benat_private)
Date: Fri May 24 2002 - 15:03:35 PDT

  • Next message: Steffen Dettmer: "Re: CGI security on a shared web server"

    aleph1at_private wrote:
    > Cyclone: A Safe Dialect of C
    > Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney, 
    > and Yanling Wang.  USENIX Annual Technical Conference, Monterey, CA, June 2002.
    > 
    > Cyclone is a safe dialect of C. It has been designed
    > from the ground up to prevent the buffer overflows,
    > format string attacks, and memory management errors
    > that are common in C programs, while retaining
    > C's syntax and semantics. This paper examines
    > safety violations enabled by C's design, and shows
    > how Cyclone avoids them, without giving up C's
    > hallmark control over low-level details such as data
    > representation and memory management.
    > 
    > http://www.research.att.com/projects/cyclone/papers/cyclone-safety.ps
    > http://www.research.att.com/projects/cyclone/papers/cyclone-safety.pdf
    > http://www.research.att.com/projects/cyclone/papers/cyclone-safety.dvi
    
    It may (or may not) be worth mentioning that, as an exercise, I ported 
    some OpenSSL code to Cyclone. It was surprisingly easy, and the value of 
    doing it is clear.
    
    I like it.
    
    Cheers,
    
    Ben.
    
    -- 
    http://www.apache-ssl.org/ben.html       http://www.thebunker.net/
    
    "There is no limit to what a man can do or how far he can go if he
    doesn't mind who gets the credit." - Robert Woodruff
    



    This archive was generated by hypermail 2b30 : Mon May 27 2002 - 15:40:23 PDT