destination? Neither this nor the argument are const, so the signature brings confusion…2122 A void function whose name starts with get is… uncomfortable. Supposing that this function gets stats pattern quite a lot… Is RVO misunderstood?3031 « Create », like « get », is a suspicious fit for void return types. Likewise for a number of other verbs (make, convert, count, etc.)32Picture from the String getName() { return "My name is " + super.getName(); } } public class Z { public static void main(String [] args) { Person p = new Student("Bob"); System.out.println(p.getName()); } }404142

Perspective Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by DesignMax Hoffmann Security Beyond Memory Safety CppCon 2024 2 Security Beyond Memory Safety Using Modern C++ to Avoid Beyond Memory Safety CppCon 2024 3 FIFTY SHADES OF SHOOTING YOURSELF IN THE FOOT WITH A RAILGUNMax Hoffmann Security Beyond Memory Safety CppCon 2024 4Max Hoffmann Security Beyond Memory Safety CppCon 2024 Beyond Memory Safety CppCon 2024 6Max Hoffmann Security Beyond Memory Safety CppCon 2024 7Max Hoffmann Security Beyond Memory Safety CppCon 2024 8Max Hoffmann Security Beyond Memory Safety CppCon 2024 9Max

Improving our safety with a quantities and units library The future is here 2CppCon 2024: Improving our safety with a quantities and units library The future is here 3CppCon 2024: Improving our safety with library Me 10 years ago 4CppCon 2024: Improving our safety with a quantities and units library Tactical Flight Computer 5CppCon 2024: Improving our safety with a quantities and units library Tactical Flight safer high-level abstractions in the library CppCon 2024: Improving our safety with a quantities and units library C++ safety 7• Many C++ engineers are expected to write life-critical so�ware today

architect of C++ software solutions for autonomous driving market in Intel Contribution into functional safety MISRA standard Contribution into WG21 in threading, vectorization and numerics. Contribution into mine! You can’t have them. Agenda 1. Current status of C++ safety: MISRA and C++ CG 2. Parallel Safety rules 3. Automotive Safety case Safety Critical API Evolution minimize API surface area , reduce determinism New Generation Safety Critical APIs for Graphics, Compute and Display Industry Need for CPU/GPU Acceleration APIs designed to ease system safety certification Rendering Compute

to safety C++ is getting safer The lifetime safety toolbox What comes next?Memory Safety • Microsoft: 70 percent of all security bugs are memory safety issues | ZDNET • Memory safety (chromium (googleblog.com)Spatial safety Temporal safetySpatial safety Temporal safetySpatial safety Temporal safetySpatial safety Temporal safetySpatial safety Temporal safetySpatial safety • BufferCheck (soon) Fuzzing • Bounds-checked data structures • Checked C, Deputy • -fbounds-safety, buffer hardening Temporal safetySpatial safety • BufferCheck (soon), SAL • ASAN, GWP-ASAN, HWASAN + Fuzzing • Bounds-checked

ptr[idx] *= 2.0f; }); Here we’re using OpenMP as an example float *h_a = { … }, d_a; cudaMalloc((void **)&d_a, size); cudaMemcpy(d_a, h_a, size, cudaMemcpyHostToDevice); vec_add<<<64, 64>>>(a, b, c); Pre-exasacaleKHRONOS SAFETY CRITICAL STANDARDS EVOLUTION OpenGL ES 1.0 - 2003 Fixed function graphics OpenGL ES 2.0 - 2007 Programmable Shaders OpenGL SC 1.0 - 2005 Fixed function graphics safety-critical subset 2016 Programmable Shaders Safety-critical subset Vulkan 1.2 - 2020 Explicit Graphics and Compute and Display Vulkan SC 1.0 - 2022 Explicit Graphics, Compute and Display safety-critical subset SYCL 2020

LLVM’s Real-time Safety Revolution Tools for Modern Mission Critical SystemsChris Apple ● 10-year veteran of the audio industry ● Previously Dolby, Roblox, Spatial Inc. ● Currently: layabout David Real-time programmingvoid process (float * audio) { // You have 11.6 ms from now, GO!!!! ... }void dispatch (Data& audio) { // Fly a rocket... ... }1. deterministic, 2. known in advance, 3 mutex_.lock(); ... } 🚨void dispatch() { x = make_unique(); ... } 🚨Sometimes it’s hiddenvoid process_audio() { numbers_[1] = 2; ... } 🤔void dispatch() { auto const x

challenges of safety • What is “safety”? • C++ Evolution • with a focus on safety • C++ Core Guidelines • How to write good contemporary C++ • Safety Profiles • How to guarantee safety Stroustrup Stroustrup - C++ safety -CppCon - October 2023 3A cause for concern (not panic) • The overarching software community across the private sector, academia, and the U.S. Government have begun initiatives to drive • NSA: https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2023/p2739r0.pdf Stroustrup - C++ safety -CppCon - October 2023 4To contrast (not a cause for complacency) • February 2023 Headline: C++

Exception Handling When to Use Exceptions (And When Not) How to Use Exceptions The Exception Safety Guarantees How to Write Exception-Safe Code How to Refactor Non-Exception-Safe CodeContent 4 How to Use Exceptions The Exception Safety Guarantees How to Write Exception-Safe Code How to Refactor Non-Exception-Safe CodeWhy Another Talk on Exception Safety? 56 https://wg21.link/p07097 https://wg21 How to Use Exceptions The Exception Safety Guarantees How to Write Exception-Safe Code How to Refactor Non-Exception-Safe CodeHow Do Exceptions Work 24 void f() { std::string s{ “Some default

for the Zig standard library? Hello World hello.zig const std = @import("std"); pub fn main() !void { const stdout = std.io.getStdOut().writer(); try stdout.print("Hello, {}!\n", .{"world"}); makes all of this explicit. In the hello.zig code sample, the main function is declared with the !void return type. This return type is known as an Error Union Type. This syntax tells the Zig compiler the error set type is a special kind of error union type that has an inferred error set type. The void after the ! operator tells the compiler that the function will not return a value under normal circumstances