101 reputation
2
bio website
location
age
visits member for 1 year, 8 months
seen Apr 15 at 22:45
stats profile views 0

Jan
14
awarded  Announcer
Sep
10
comment Deleting a Java Object securely
@Thomas Pornin To nitpick a bit ;) Theoretically one can avoid the GC problems, the "solutions" are just somewhat.. complicated or need a compliant API. #1: ByteBuffer.allocateDirect(). #2: Use an unsafe object to allocate the necessary memory and craft your own char[] or string. #1 obviously only works with an API that would use CharBuffers (ugh) and #2 has more than enough problems (though I've wrote a small app once to win a bet). But in both situations you get memory that is not allocated on the GC heaps and therefore not copied around if you use a stop&copy GC.
Sep
10
awarded  Supporter
Sep
10
comment How should I compile program for fuzz testing?
You want to have a configuration in the test where you do not get saved by the enhanced debug checks like app verifier or the malloc_check stuff - but since every problem one of those two finds is (or should) be a bug that has to be fixed anyhow, wouldn't this only increase the chances to crash? You may crash at a different position (ie most likely earlier), but you'd still find the bug. The only problem I'd see is with undefined behavior that results in different code, but other than that I usually use the debug builds.