“Rust is safe” is not some kind of absolute guarantee of code safety

Re:“Rust is safe” is not some kind of absolute guarantee of ... by pornel on Sunday October 02, 2022 @12:23PM (#33057357)

But it can still be safer - e.g. a panic can trigger an emergency stop instead of silently overwriting the "go full throttle" variable.

[ Parent | on HN ]

Re:“Rust is safe” is not some kind of absolute guarantee of ... by mike_hock on Sunday October 02, 2022 @12:51PM (#33057702)

Yes, or jumping to the "emergency stop" routine can instead trigger "go full throttle" because the jump address has been corrupted.

Or in an actual vehicle, the "emergency stop" (if that means just stomping on the brakes) can flip the car and kill its passengers.

[ Parent | on HN ]

Re:“Rust is safe” is not some kind of absolute guarantee of ... by stjohnswarts on Sunday October 02, 2022 @03:12PM (#33059186)

It's about the odds here. Nothing is 100% safe. Independent systems almost always provide backup safety incase the OS/embedded system fails. Thing like overcurrent detector, brown out detectors, speed governors, etc in case code does something as a result of running corrupted (or something similarly awful)

[ Parent | on HN ]