Buffer Overflows Keep Happening Because We Fix Them in Software
CHERI is a hardware extension that turns every pointer into a bounded capability.
Buffer overflows have been on the CWE Top 25 for twenty years. We have stack canaries, ASLR, DEP, control-flow integrity, and memory-safe languages, yet they…