News for hackers. Stuff that matters.

A comment on Fuzzing is magic – Or how I found a panic in Rust's regex library. Parent comment

Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by dom0 on Saturday April 01, 2017 @03:39PM (#14013751)
Deadlocks and race conditions are two IMHO typical examples of what many developers consider shortcomings of the platform / language, while they are actually application logic bugs that are hard to catch at a language level for all but the most trivial cases. So this is a very nice listing right there, starting with two things that some people may find surprising, then moving towards things that no one should find surprising :)
[ Parent | on HN ]
Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by geofft on Saturday April 01, 2017 @03:50PM (#14013814)
Note that it's possible to use Rust's typesystem to build things that are deadlock-free and race-condition-free; see, for instance, https://aturon.github.io/blog/2015/08/27/epoch/ for an API for building lock-free data structures. The assistance you get from the Rust language is much better than the assistance you'd get from C or C++. (Rust has a lot of features other than memory safety!)

It's just that Rust doesn't consider it unsafe to build a design that permits deadlocks and race conditions.

[ Parent | on HN ]
Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by BuuQu9hu on Saturday April 01, 2017 @05:01PM (#14014143)
There are languages like E and Monte where deadlocks aren't possible unless there is an actual loop in the data flow dependencies and race conditions are impossible, but they aren't commonly known.
[ Parent | on HN ]
Re:Fuzzing is magic – Or how I found a panic in Rust's regex... by dom0 on Saturday April 01, 2017 @06:01PM (#14014412)
> unless there is an actual loop in the data flow

Hence trivial. Making something provably deadlock-free where the message flow is a DAG is a trivial case.

> race conditions are impossible

I very much doubt that since race conditions are not only a technical issue (i.e. "is updating that counter atomic?"), but largely a specification issue. Recall that issues like lost updates (or all those file system races) are race conditions, as well as the many issues with non-atomic REST APIs.

[ Parent | on HN ]