Re:DARPA: Translating All C to Rust (Tractor)
by bigstrat2003 on Tuesday July 30, 2024 @07:12PM
(#41115029)
I (not the person you are replying to) do understand that's how compilers interact with UB. However, a wealth of experience has shown us that the assumption "UB doesn't occur" is completely false. It is, in my opinion, quite irresponsible for compiler writers to continue to use a known-false assumption when building the optimizer. I don't really care how much speed it costs, we need to stop building software on a shaky foundation like that.
[ Parent
| on HN ]
Re:DARPA: Translating All C to Rust (Tractor)
by astrange on Tuesday July 30, 2024 @09:41PM
(#41115765)
Soon (or actually, already) we'll have MTE and CHERI, and then that C undefined behavior will be giving you security improvements as well as speed improvements.
Can't design a system that 100% crashes on invalid behavior if you've declared that behavior is valid, because then someone is relying on it.