c# - Java 和 C# 中的内存管理有何不同？

Question

我正在通读 2010 CWE/SANS Top 25 Most Dangerous Programming Errors其中一个条目是 Buffer Copy without Checking Size of Input .它建议使用具有功能的语言来防止或减轻此问题，并说:

For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer.

我不知道 Java 和 C# 在内存管理方面存在任何有意义的差异。为什么 Java 不会发生缓冲区溢出，而 C# 只能防止溢出？以及如何在 C# 中禁用此保护？

Answer 1

java不支持裸指针(严格来说不支持指针运算)

在 C# 中，您可以使用 unsafe code and pointers和非托管内存，这使得缓冲区溢出成为可能。参见 unsafe关键词。

To maintain type safety and security, C# does not support pointer arithmetic, by default. However, by using the unsafe keyword, you can define an unsafe context in which pointers can be used. For more information about pointers, see the topic Pointer types.