> a big chunk of these vulnerabilities would not exist if C and C++ [...] simply didn’t have zero-terminated string, initialized values by default, had a proper pointer+length type thus replacing 90% of pointer arithmetic with easily bounds-checkable code, and had established a culture that discouraged the prevalent ad-hoc style of memory management. This is Rust's calling-card, so I find this plea for a better lang…
Doesn't the Linux kernel zero out memory pages that are accessed by a process, before they've been written to?
I guess it doesn't matter, since the larger concern is that the process could accidentally read its own freed blocks....