Re:Some Were Meant For C (2017) [pdf]
by StillBored on Tuesday March 02, 2021 @05:59PM
(#26322342)
And it only catches a trivial minority of actual security problems, which can occur in a lot more ways than use after free/etc.
IMHO, Rust simply isn't good enough at catching all types of bugs to justify rewrites at this point, and its likely when you look at some of the work being done at the processor manufacturing companies that they don't believe it either.
Re:Some Were Meant For C (2017) [pdf]
by saagarjha on Wednesday March 03, 2021 @12:00AM
(#26324953)
Uh, not at all. Rust’s compiler probably catches like half of all bugs that currently lead to security issues in memory-unsafe languages. And the things you mentioned are similar band-aids, not fixes.
IMHO, Rust simply isn't good enough at catching all types of bugs to justify rewrites at this point, and its likely when you look at some of the work being done at the processor manufacturing companies that they don't believe it either.
Consider: https://en.wikichip.org/wiki/arm/mte, https://en.wikipedia.org/wiki/Intel_MPX, and https://lwn.net/Articles/718888/
There are quite a number of these in the pipeline, which make some of what rust does redundant.