IIUC even single-threaded Zig programs built with ReleaseSafe are not guaranteed... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ameliaquining on July 24, 2025 | parent | context | favorite | on: There is no memory safety without thread safety

IIUC even single-threaded Zig programs built with ReleaseSafe are not guaranteed to be free of memory corruption vulnerabilities; for example, dereferencing a pointer to a local variable that's no longer alive is undefined behavior in all optimization modes.

skeezyboy on July 25, 2025 [–]

well just dont do it then

ameliaquining on July 25, 2025 | [–]

That's also the standard advice in C and C++, and yet, people screw it up frequently enough to merit a CWE category: https://cwe.mitre.org/data/definitions/562.html

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact