2 ms·
Perhaps... but if you have to formally verify the entire module, those facilities aren't doing much good are they?
by shadowmint 11y ago
Perhaps... but if you have to formally verify the entire module, those facilities aren't doing much good are they?
- Jweb_Guru 11y agoYou don't have to formally verify the entire module. The module "just" has to be correct :P. Additionally, very often, unsafe code is used in ways that cannot contaminate the entire module (that's the ideal, in fact), and the module that the unsafe code is used in is made deliberately small.