168. Safety, "C/C++", reflection, include order, Bjarne Stroustrup’s quotes

With Gianluca Delfino, Frances Buontempo, Vladimír Arnošt, Dmitry Kuzminov and other colleagues.

https://www.reddit.com/r/cpp/comments/18s2isl/c_club_168_safety_cc_reflection_include_order/

Media

Video

https://youtu.be/spKvxc2R7nc

Podcast

https://redcircle.com/shows/0835997e-47ec-438e-b6ae-0b390966aa7e/episodes/af037d9d-c7e2-4c31-8964-a3db20b2d911

Powered by RedCircle

Feedback

Roi Barkan commented on episode 166:

I think Herb’s point is that the combination of: 1. his cpp2 feature of “automatically std::move the last use of each variable” together + 2. the fact that rvalues can’t be passed to functions that take “mutable reference” (and cpp2 inout/out) = mean that a “mutable reference” (and inout/out) parameters will act as “nodiscard” (and will have to be manually discarded via the assignment to _). I guess Herb likes it because he likes nodiscard, and he is happy that he “got it for free” as a consequence of 1+2 above

The code in question: Herb Sutter: Cppfront Autumn Update

{
    x := my_vector.begin();
    std::advance(x, 2);
    _ = x; // all right, you said you meant it, carry on then...
}

Walter Svenddal left this comment on the same video:

It’s honestly pretty infuriating how often this group completely misunderstands the articles they read.

Like how for about 5 mins in discussing cppfront’s explicit data flow (33:02), they speculate the purpose of discarding 'x' has something to do with optimizations. And then when they finally continue reading, they realize it’s just about data flow, then misread the article again and somehow hallucinate that the discard statement must be modifying the behaviour of the previous function call.

This has happened many times in past videos. Does the presenter read the articles they talk about beforehand? It seems like something they should review beforehand instead of just…​ Guessing, without reading, during their meetup.

Wow, harsh. I’ll make sure to understand 100% of everything I read from now on.

The Case for Memory Safe Roadmaps

A new "C/C++ is bad, actually" whitepaper has dropped, woo-hoo!

Published by USA Cybersecurity and Infrastructure Security Agency (CISA) (PDF)

Programming languages such as C and C++ are examples of memory unsafe programming languages that can lead to memory unsafe code and are still among the most widely used languages today.

The author: "Bjarne doesn’t like the term "C/C++". I know, I’ll use "C and C++" instead!"

No examples of other memory-unsafe languages. So it’s just about C/C++ then. Why not say so?

Safer Language Subsets

The C++ community has been contemplating the balance between backwards compatibility, memory-safety defaults, and other priorities for the base language. There are multiple targeted efforts to make C and C++ less vulnerable for existing code bases and products. For example, Apple has modified the C compiler toolchain used in the iBoot system16 to mitigate memory and type safety issues. <…​> Microsoft has developed “Checked C” that “adds static and dynamic checking to C to detect or prevent common programming errors such as buffer overruns and out-of-bounds memory accesses.” There are more general efforts to improve C++ memory safety for existing code, including efforts like Carbon.

Hmm. Apple and Microsoft’s efforts are targeted at C, and Carbon is not "improving C++".

Well, they are not wrong to point the finger at C/C++.

As Stroustrup said: C/C++ is a mythical language. I know C and C++ and you write those quite different.

They’ve been saying this for almost 10 years now. Most security issues are not the result of malevolence - they’re the result of human error. I’ve seen some of the code that contractors have delivered. A lot of it was appallingly bad. It’s cheaper and safer for them to get people off of C/C++ than it is for them to try to clean up and secure dangerously bad code.

Feedback on feedback

Brace yourself.

Reflection feedback

Reddit

Reflect-cpp

Reddit

GitHub

Compiler options hardening guide for C and C++

OpenSSF

Reddit

CLion Nova 2023.3

JetBrains

Reddit

Uses ReSharper C++/Rider-based out-of-process language engine. Will be integrated into CLion later.

Features to remove from C++

Reddit

C++ is getting more and more complex. The Committee keeps adding new features based on its consensus. Let’s remove features based on Reddit’s consensus.

rhubarbjin:

Everyone agrees that C++ is broken, but no one agrees precisely which parts need fixing …​which just goes to show that the language isn’t broken at all. It just has a very wide user base with very diverse needs. One coder’s boondoggle is another coder’s bedrock.

jdehesa:

Gotta love how nearly everything suggested in the replies (save for std::vector<bool>?) is followed by a reply saying how that feature is actually useful sometimes :) It’s too late for C++ now, at this point everyone uses it on their own particular way and every obscure or weird feature has found its place for someone 😄

And we have a winner:

The only thing wrong with C++ is other users of C++.

See also: Chesterton’s fence

Bjarne Stroustrup Quotes discussed on HackerNews

HackerNews

Will C++ ever get a standard GUI/2D Graphics library?

Reddit

Include order

From the Web

Q: Name a book that made you cry. A: "Data Structures and Algorithms in Java"

Lucid dream startup

Lucid dream startup says engineers can write code in their sleep. Work may never be the same. (Fortune)

Slashdot