Ask HN: Would any code analysis tools have caught have caught heartbleed? 1 pointmacarthy1212 years ago3 commentsSaveHideCopy link On HNIf not, why not? Is this kind of issue something that a language feature could avoid?Comments−cpeterso12yThis blog post demonstrates how OpenSSL's unsafe C code can be migrated to a safe programming language called ATS (Applied Type System):http://bluishcoder.co.nz/2014/04/11/preventing-heartbleed-bu...−pascal_cuoq12ySee http://blog.regehr.org/archives/1125 (Heartbleed and Static Analysis)−macarthy12OP12yLooks like the FLOSS community needs to start exploring these kind of tools.
Comments
This blog post demonstrates how OpenSSL's unsafe C code can be migrated to a safe programming language called ATS (Applied Type System):
http://bluishcoder.co.nz/2014/04/11/preventing-heartbleed-bu...
See http://blog.regehr.org/archives/1125 (Heartbleed and Static Analysis)
Looks like the FLOSS community needs to start exploring these kind of tools.