Work on the Secure C++ extensions proposal, cast a 12 months in the past to handle reminiscence security within the language, has ceased, based on Harry Bott, the CEO of the C++ Alliance, which oversaw the proposal. The plan misplaced out to security profiles from C++ founder Bjarne Stroustrup.
“Sure, work on Secure C++ inside ISO has been discontinued,” Bott stated September 29 in response to an InfoWorld e mail inquiry. The C++ Security and Safety SG/EWG (Research Group/Evolution Working Group) committee prioritized security profiles from Stroustrup instread, Bott stated. The ballot was 19 for Profiles, 9 for Secure C++, 11 for each, and 6 impartial. “Profiles moved ahead as an incremental, backward‑appropriate path possible for C++26 timelines,” Bott stated. “In contrast, Secure C++ didn’t attain committee consensus and was seen to indicate basic redesign and excessive specification/implementation threat, with broad ecosystem‑migration considerations. Profiles have been additionally considered because the quickest sensible response to regulatory strain for reminiscence security.” Thus C++ security work continues through Profiles and associated library and tooling efforts within the committee.
Secure C++ extensions have been supposed to supply C++ builders memory-safe implementations of important knowledge buildings and algorithms, together with options that stop widespread memory-related errors. C++, together with the C language, had been the goal of criticism by the Biden White Home over reminiscence security considerations. Nevertheless, Sean Baxter, a key advocate of the Secure C++ proposal, stated earlier this month that he stopped engaged on the plan late final 12 months. “The C++ committee acted shortly to specific that this wasn’t the popular manner ahead,” Baxter stated in a September 15 e mail.
