Post #2234499
2025-12-03 16:47 UTC
@vitaut@mastodon.social @meetingcpp@mastodon.online why indeed?😂
I'll bet nlohmann and protobuf together cover a fair chunk of C++ production code serialisation.
Absolutely, you need to sanitise all data coming into the program or you'll get all sorts of bugs. The empty bits are a perennial problem. It's tough regardless of optimisation. But I'm struggling to find a way around the sanitiser here: https://godbolt.org/z/cY4erYTPb
Replies (3)
-
@JSAMcFarlane@mastodon.ie 2025-12-03 16:48
@vitaut@mastodon.social @meetingcpp@mastodon.online (disclaimer: no amount of tooling alone is known to be sufficient ever, anywhere)
-
@meetingcpp@mastodon.online 2025-12-03 16:53
@JSAMcFarlane@mastodon.ie @vitaut@mastodon.social probably a good fuzzing setup would catch this then.
-
@DanielaKEngert@hachyderm.io 2025-12-03 17:03
@JSAMcFarlane@mastodon.ie @vitaut@mastodon.social @meetingcpp@mastodon.online Not sanitizing input that one receives over whichever network is a cardinal sin in engineering: you *must* be able to deal with a so-called "babbling idiot" that dispenses meaningless nonsense to a communication channel.