3 ms·
Nope. It's only true when all your code use safe subset/built upon a perfectly correct unsafe base (which is inevitable in a project like Chromium) with correct
by htfy96 8y ago
Nope. It's only true when all your code use safe subset/built upon a perfectly correct unsafe base (which is inevitable in a project like Chromium) with correct usage. Otherwise a single misused external call with unsanitized value can ruin all of your security guarantee.
- Ygg2 8y agoNot really. It's been proved that if your unsafe foundations are correct and don't break the rules (i.e. their precondition is correct), then anything safe built on top of that is also correct. Sure you could rely on a C/C++ library that causes problems, but then again you can either: A) fix that library B) replace that part with Rust or even stricter language.