OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Fwd: Re[2]: [Dailydave] Lame studies that people quote as fact that have no basis in reality and still don't prove anything even if they did

From: Halvar Flake (halvargmx.de)
Date: Thu Feb 05 2004 - 09:34:17 CST

Hey all,

RT> Oops, I'm thinking like a developer who expects to be responsible for
RT> building robust, testable, maintainable code before it's delivered
RT> to Q-A or the customer, or subjected to some pornographic test cooked up
RT> by CTO (Chief Torture Officer) Aitel using Canvas.

:-) Static arrays have their place, and nobody says you should
dynamically allocate everything you need. But if you manage to build
me a tree of dynamically calculated depth or a cyclic graph without the
use of pointers, you can be sure that the code you created is less
readable and maintanable than the "elegant" solution.

Humans invented complex data structures for a reason. I am not saying
that they should be applied indifferently. In general, when writing
secure code, you should try to keep the shape of your data structures
simple. But sometimes that is impossible unless you're willing to
trade O(n) to O(n^c) or something a lot worse.

Cheers,
Halvar