🚀 go-pugleaf

In article <1990Apr10.215213.18124@diku.dk> njk@diku.dk (Niels J|rgen Kruse) writes:
> > To test your model of bounds-checking in C, what are the bounds of
> >         foo->buf
> > after
> >         struct v { int bar; char buf[1]; } *foo;
> >         foo = malloc (sizeof (struct v) + 2);

malloc() returns a char pointer bounded between the bottom and the top
of the allocated memory. foo then gets a struct v pointer with the same
bounds. buf is an end-of-structure array (hooray for this special case)
and hence is (when used as a pointer) a char pointer with lower bound
sizeof(int) + (char *) foo and upper bound the end of foo.

This works perfectly. ANSI's pointer semantics could be defined solely
in terms of (pointer,lower,upper).

---Dan