Re:Serious Chrome zero-day
by htfy96 on Wednesday March 06, 2019 @08:30PM
(#19324829)
Nope. It's only true when all your code use safe subset/built upon a perfectly correct unsafe base (which is inevitable in a project like Chromium) with correct usage. Otherwise a single misused external call with unsanitized value can ruin all of your security guarantee.
[ Parent
| on HN ]
Not really. It's been proved that if your unsafe foundations are correct and don't break the rules (i.e. their precondition is correct), then anything safe built on top of that is also correct.
Sure you could rely on a C/C++ library that causes problems, but then again you can either:
A) fix that library
B) replace that part with Rust or even stricter language.