Re:Microsoft's Safe Systems Programming Languages Effort (Rust)
by dpc_pw on Saturday May 23, 2020 @01:58AM
(#23280339)
Just to add to that: Integer overflows in release builds can be turned on, and even when they are off, at very least they are not UBs. More info in http://huonw.github.io/blog/2016/04/myths-and-legends-about-....
Re:Microsoft's Safe Systems Programming Languages Effort (Rust)
by server_bot on Sunday May 24, 2020 @12:15AM
(#23289030)
Thanks for pointing that out and linking through to a great resource!
That may not seem like a big deal for the x86_64 world where modern mitigations largely make shellcode a thing of the past (hence heap exploitation, ROP/JOP, etc) but it is a BIG DEAL for embedded microcontrollers that lack OS/HW memory protection - an area where #![no_std] Rust shines.
As a security researcher and not a developer, let me be very frank: you should STRONGLY consider Rust in place of C or C++. But know that release profile builds don't do integer overflow checking, so don't get cocky :P