Re:Making Unsafe Rust a Little Safer
by cbdhsjshs on Tuesday December 17, 2024 @08:33PM
(#42447316)
Formal verification doesn't mean shit when a cosmic ray bitflips your program counter.
Safety critical systems need to fail safely, because they will fail. Detecting unexpected execution should halt the system and revert it back to a known state (e.g. cycle power).
Re:Making Unsafe Rust a Little Safer
by aw1621107 on Thursday December 19, 2024 @11:40AM
(#42463172)
Depends on the "threat model" I suppose, for lack of a better phrase. I'd imagine hardware faults and the response(s) can be modeled if you decide to do so as well.
Safety critical systems need to fail safely, because they will fail. Detecting unexpected execution should halt the system and revert it back to a known state (e.g. cycle power).