I'll be speaking at the TRISS Three Rivers Info Sec conference lnkd.in/eTAYe83b for the first time. I'm not giving the talk they have on their website however. Instead I'll be giving the following talk on Undefined Behavior in the C Programming Language...
Oct 15, 2025 · 3:01 AM UTC
and what the C Committee is doing to eliminate it. I hope you'll join me there. I might even bring a few books to give away from No Starch Press. Title: "UB Gone" Abstract: The C and C++ languages contain undefined behaviors (UB) that compilers are not required to diagnose and
which can be completely ignored, leading to unpredictable results. Undefined behaviors are frequently targeted for compiler optimizations, and many exploitable vulnerabilities in C and C++, such as buffer overflows and signed integer overflows, arise from UB. The C standard has
established an Undefined Behavior Study Group with the goal of reducing UB in C2Y. C++ plans to review these changes for applicability to C++. Many of these behaviors have been defined or made into constraint violations. Some can be detected at runtime, while others will require
new annotations or an opt-in memory safety mode. Some have been determined to be "ghosts" that can never be violated. Reducing or eliminating undefined behaviors in C and C++ will improve safety and security, eliminating real and perceived risks while retaining the flexibility

