Re: CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx

[nightmare.yeah27 () aceecat org]

On Thu, Sep 28, 2023 at 04:42:33PM -0400, Demi Marie Obenour wrote:

> How long will it take for corporations to accept that writing media
> codecs in C, C++, or any other memory-unsafe language is a
> fundamentally bad idea, and that it is better to rewrite the codecs
> in a safe language (such as Wuffs or Rust) than to try to secure the
> existing ones?

Wouldn't the low-level code have to ultimately depend on unsafe Rust
modules, or similar feature in other safe language?

-- 
Ian