3 ms·
Are they doing security testing as they go? I'm really looking forward to seeing how it fares against the typical "use after free" javascript errors that pwn to
by youdontknowtho 10y ago
Are they doing security testing as they go? I'm really looking forward to seeing how it fares against the typical "use after free" javascript errors that pwn to own always demo's. I'm not particularly a fan of Rust, but I certainly like the ideas that they are trying to incorporate in it.
Great stuff. Looking forward to see how it evolves.
- legulere 10y agoServo doesn't contain an own javascript engine. Use after free generally isn't possible in rust in safe code.
- geofft 10y agoI enjoyed this 2014 blog post on how they avoid use-after-frees by design, by letting SpiderMonkey have responsibility for all DOM garbage collection: https://blog.mozilla.org/research/2014/08/26/javascript-servos-only-garbage-collector/ https://blog.mozilla.org/research/2014/08/26/javascript-serv...
- youdontknowtho 10y agoOoh. Nice one, mate. Thanks.