Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by forbiddenlake on Monday June 24, 2024 @10:35PM
(#40783780)
> Confirmed not-a-bug.
Initially closed not a bug, but then Poettering overruled that decision and implemented a fix which is already released.
https://github.com/systemd/systemd/commit/e76015738942246db7...
Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by yjftsjthsd-h on Monday June 24, 2024 @11:43PM
(#40784247)
> There’s a nice pure-rust ssh client/server already.
Prod ready, audited, non-buggy in actual use? And if so, do you have a link so I can start test-deploying it?
Systemd should just be scrapped. This week’s wtf “systemd-tmpfile —-purge” intentionally changed its behavior to “rm -rf /home”. Confirmed not-a-bug. There are dozens of other comparable screwups in that stack, even ignoring the long list of CVEs (including dns and ntp, I think). Rust can’t fix that.
I haven’t heard of any issues with jemalloc, though that seems reasonable (assuming calling rust from C doesn’t break compiler inlining, etc).