← Back to context

Comment by Spivak

5 hours ago

How does 5 work in practice? Surely no one is actually checking if their arithmetic overflows, especially from user-supplied or otherwise external values. Is there any use for the normal +?

You think no one checks if their arithmetic overflows?

  • I'm sure it's not literally no one but I bet the percent of additions that have explicit checks for overflow is for all practical purposes indistinguishable from 0.

    • Lots of secure code checks for overflow

          fillBufferWithData(buffer, data, offset, size)
      

      You want to know that offset + size don't wrap past 32bits (or 64) and end up with nonsense and a security vulnerability.