OpenSSL Security Advisory
By my count 12 out of the 14 vulnerabilities in this advisory are due to manual memory management. And past ones were similar.This is security critical code, being developed and polished for more than a decade, and the only thing protecting the privacy of millions (billions?) of people. If any public project should have gotten this right, it should be this. Yet it can't.Is this time to admit we simply can't do manual memory management at this level and move to something else? I know the performance boost is tempting, but I think we can't afford the consequences.