Skip to content

Commit 13f6120

Browse files
marnovandermaasdavidchisnall
authored andcommitted
Minor changes to safe language myth blog
1 parent a8889f1 commit 13f6120

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

_posts/2024-08-28-cheri-myths-safe-languages.markdown

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,6 @@ This may be in the form of timing side channels, or more subtle things such as c
113113
This doesn't always apply.
114114
For more common tasks, the metaprogramming facilities in a higher-level language may make the rewrite significantly simpler to write and maintain than a C original.
115115

116-
117116
## CHERI does not fix bugs for you
118117

119118
CHERI doesn't guarantee that your code is free from memory-safety errors, it guarantees that any memory-safety bugs will trap and not affect confidentiality or integrity of your program.
@@ -180,7 +179,7 @@ The [`cheriot-audit` tool](https://github.com/CHERIoT-Platform/cheriot-audit) le
180179
You can reason about the damage from a compromise even if an attacker can gain arbitrary-code execution in a compartment.
181180
For supply-chain security, you should assume that a third-party component is compromised and includes malicious code.
182181
CHERIoT lets you reason about what it can do in these cases.
183-
In contrast, if a Java or Rust component is malicious and uses (intentional or otherwise) unsafe language features, it can to anything that the program can do.
182+
In contrast, if a Java or Rust component is malicious and uses (intentional or otherwise) unsafe language features, it can do anything that the program can do.
184183

185184
## The future should be safe languages on CHERI
186185

0 commit comments

Comments
 (0)