News for hackers. Stuff that matters.

A comment on Making Unsafe Rust a Little Safer. Parent comment

Re:Making Unsafe Rust a Little Safer by aw1621107 on Tuesday December 17, 2024 @05:29PM (#42446108)
In those kinds of scenarios I think you'd typically want to go for formal verification or similar methods because you want liveness guarantees in addition to memory safety guarantees.
[ Parent | on HN ]
Re:Making Unsafe Rust a Little Safer by cbdhsjshs on Tuesday December 17, 2024 @08:33PM (#42447316)
Formal verification doesn't mean shit when a cosmic ray bitflips your program counter.

Safety critical systems need to fail safely, because they will fail. Detecting unexpected execution should halt the system and revert it back to a known state (e.g. cycle power).

[ Parent | on HN ]
Re:Making Unsafe Rust a Little Safer by aw1621107 on Thursday December 19, 2024 @11:40AM (#42463172)
Depends on the "threat model" I suppose, for lack of a better phrase. I'd imagine hardware faults and the response(s) can be modeled if you decide to do so as well.
[ Parent | on HN ]