> And what I'm saying is, maybe we can create an environment where we don't end ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pcwalton on Feb 20, 2016 \| parent \| context \| favorite \| on: A Skeleton Key of Unknown Strength (CVE-2015-7547) > And what I'm saying is, maybe we can create an environment where we don't end up in undefined states That environment is not going to be programmable in C, unless you want a huge performance hit.

dakami on Feb 21, 2016 [–]

You might be right, you might not be, in the general case. In the specific case getaddrinfo is not performance sensitive (to say the least) and that entire block could be specially compiled 10x slower or run inside of a trivially available sandbox.

We have options we're not exploring.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact