TEAM-ADA Archives

Team Ada: Ada Programming Language Advocacy

TEAM-ADA@LISTSERV.ACM.ORG

Options: Use Forum View

Use Monospaced Font
Show HTML Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Roger Gariépy <[log in to unmask]>
Reply To:
Roger Gariépy <[log in to unmask]>
Date:
Wed, 6 Feb 2002 21:11:03 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (59 lines)
You can find a link to the paper of M. Eisenstadt at:
http://www.adahome.com/articles/1997-05/am_bugs.html

--------------------------------------------------------
Roger Gariépy                  :-)   <-   :-(
[log in to unmask]


----- Original Message -----
From: "John McCormick" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Wednesday, February 06, 2002 10:11 AM
Subject: Re: Buffer Overflow Propensity as a Function of Programming
Language


> I recall from my analysis of the data used by Mark Eisenstadt to classify
> really difficult bugs that there were a good number of bugs resulting from
> array bounds errors.   Errors that Ada and Java would have caught.
>
> Mark's article is Eisenstadt, M. (1997). My Hairiest Bug War Stories.
> Communications of the ACM, 40, 30-37.
>
> While he didn't give all the data on the bugs, he will make it available
on
> request.
>
> John
>
> At 09:14 AM 2/6/2002 -0500, Ada Marketing wrote:
> >Tom,
> >
> >I don't want to be negative, but I don't see Ada as less susceptible to
> >buffer overflow.  You can still write bad code.  The advantage on the
> >Ada side is that most data structures (probably all) will raise a
> >predefined or user defined exception should an overflow occur.  Thus the
> >overflow can not be as easily ignored.
> >
> >
> >"Thomas A. Panfil" wrote:
> >
> >> Hi All,
> >>
> >> I'd like to be able to cite a good paper on why Buffer Overflow
> >> susceptibility is common in software written in some popular
> >> language(s), and rare or relatively easy to prevent when using
> >> other languages.  Advice, anyone?
> >>
> >> Thomas A. Panfil / Treasurer -- Baltimore SIGAda
>
>
>
> -------------------------------------------------------
> John W. McCormick                [log in to unmask]
> Computer Science Department      [log in to unmask]
> University of Northern Iowa      voice (319) 273-6056
> Cedar Falls, IA 50614-0507       fax (319) 273-7123
> http://www.cs.uni.edu/~mccormic/

ATOM RSS1 RSS2