Unsoundness in Pin

Re:Unsoundness in Pin by staticassertion on Friday November 29, 2019 @08:57PM (#21668022)

I don't get how that's ever possible, regardless of soundness issues. Can you not simply use unsafe in a capsule, and violate this constraint? The only way isolates in V8 manage to provide any isolation is because the runtime/ language forbid such things entirely.

I suspect it is not so simple as "Rust's safety ensures malicious rust code can't access data".

[ Parent | on HN ]

Re:Unsoundness in Pin by __s on Friday November 29, 2019 @09:25PM (#21668127)

Capsules aren't allowed to use unsafe. The target of tock is not generally going to be out of order, so spectre things shouldn't occur

[ Parent | on HN ]

Re:Unsoundness in Pin by staticassertion on Friday November 29, 2019 @10:14PM (#21668291)

Is there a doc about that? Can they also not use external crates? Very curious.

[ Parent | on HN ]

Re:Unsoundness in Pin by __s on Saturday November 30, 2019 @12:58PM (#21671219)

There's a blog post https://www.tockos.org/blog/2017/crates-are-not-safe

Lots of example code https://github.com/tock/tock/tree/master/capsules

[ Parent | on HN ]

Re:Unsoundness in Pin by staticassertion on Saturday November 30, 2019 @04:42PM (#21672294)

Thank you.

[ Parent | on HN ]